last executing test programs: 10.90094885s ago: executing program 1 (id=5402): unshare(0xc040480) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000180)) unshare(0xc040480) 10.403606469s ago: executing program 1 (id=5406): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newtfilter={0x114, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0xe4, 0x2, [@TCA_FLOW_EMATCHES={0xd0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x8}, "6c28274fba67a144693c9ff30133101bfccbf041d26bf923ff1eb050af31e62c5b808863cda35e3e42549ac4e3c28a3ba20a04167e4aaf257b5990501fcfc3cd35b0"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd403, 0x1, 0x6}, {0x3, 0x6, 0x7, 0x2, 0x4, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x475a, 0x8, 0x40}, {0x3, 0x6, 0x2}}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="8bf3aaa4fc224317", @TCF_META_TYPE_VAR="3e15", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5133011e4f3300086e", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x7, 0x0, 0x2}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_DIVISOR={0x8}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) close(0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r12 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x1268, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x1254, 0x1, [@m_csum={0x164, 0x7, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x5, 0x37f5}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x8, 0x4, 0xd, 0x400}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x3, 0x1, 0xf}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0x401, 0x2}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x1, 0x4}, 0x65}}]}, {0xac, 0x6, "853ae5e484d3df742e3f2cf62eaaaf61e53d4b53d61201cdb805812a12fa163c195cc788d0b695253596ec9e80dac017500ca8aa4f3d1b113e876a060073b125db478b98453a87a54040f86ac1acbfc2cf457644dc4fd6d02bf98aae7522cf4ebbfe0c95576af71f0889dccad9bec062a881ecb1e8ba6b54442d18ab6eae1d4843cbc637f55a9a84d168584c4e74398ebba6cd69ce1401cd5ff9e00dc6f93d49b4856370a57489e0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x40, 0x6, 0x0, 0x0, {{0xf}, {0x4}, {0x10, 0x6, "f9e4d93d59b0a72900a13efe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x9c, 0xc, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x46, 0x0, 0x7, 0x2}, 0x5}}]}, {0x49, 0x6, "a9fc2f980cb688d36545192c1ddee5fd05ed243b40beb546ad4f85454bba60ba6f8c30450967d03ed4fa54f5be7c3d922f0b1f5a4534a91a76a8f05d8aea9f29747e0fb64c"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x7c, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x4f, 0x6, "891f7c59450d5b7e6c4e7f955c22c23cb644a4ec112e1255234dc5f2df2e769d33bff6e56195f954e6133c8bc4852ea9c530b8aa29278cd2f0f8ca2a551b8009d06ebb51778675278e93c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xec, 0x12, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x2, 0xffffffffffffffff, 0x4, 0x5}}]}, {0x99, 0x6, "18a646f6de4c23b81a00ac1ab4101a6c35a2b3cc532ed7aca2c2a70919a0e815ea6a64cb0497dbdf09ef491083532a0902ec934d3d54df3e8122373c5010082eab5c2a9ba2aec2af356323333c1416f51baf45cc0b50c90fd8e25394acca6035531f1d2554e93a92c7c3cebf270f144aa39f05cf312c5f25222a577632c63a6dde3a55810e02e5967797010b136708676b0f6588b2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x124, 0x1e, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x800, 0x1, 0x4, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x7, 0x7, 0x6}, 0x2a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x18, 0x8, 0x8, 0x220}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x7a81, 0x8, 0x915, 0x4}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x8, 0x10000000, 0x5, 0xa}}}]}, {0x66, 0x6, "278df8d5358b8d7f6e6704ebc4a43a9d26487df5e03194d4fe0316afb8ff5b5e452920b4254424cc2c9f7bb735391c58542f4e2a2a11c85f112e71fcf00bc67016cf30edce25f3142b70bb8f2d718da63cd227589af942846ccf8e9c17c10977dff3"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0xd84, 0xc, 0x0, 0x0, {{0xb}, {0xc9c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0xe4, 0x4, 0x8, 0x0, 0xff, 0x4, 0x3, 0x7, 0x5116, 0x8, 0x1, 0xff, 0x0, 0x1, 0xd, 0x8, 0x80000001, 0x4, 0xfff, 0x1, 0x3, 0x1, 0x2, 0x7, 0x80000001, 0x3, 0x8, 0x2f44, 0x5, 0x3ff, 0x9, 0x5, 0x9, 0x2, 0xf0, 0x4, 0x7ff, 0xef2, 0x20000000, 0xfffffff8, 0x9ab5, 0x2, 0x101, 0x7, 0x1, 0x4, 0x3, 0x0, 0x1, 0xfd, 0x2, 0x3ff, 0x9, 0x8, 0x3, 0xe40, 0x0, 0x7, 0xff, 0x2, 0x6, 0x3, 0x6, 0xd, 0x5, 0x1, 0x31bb, 0x5, 0x8, 0x1, 0x1, 0xe6, 0x4, 0x4, 0x8000, 0x69f, 0x6, 0x3fa8a088, 0x6, 0x5d00, 0x0, 0x6, 0x1, 0xa, 0x0, 0x3, 0x9, 0x2, 0xc, 0x9, 0xffffff51, 0x7, 0x8, 0x3, 0x0, 0x101, 0x8, 0x80, 0x1, 0x2, 0x7, 0x2, 0x2, 0x8, 0x5, 0x3, 0x8000, 0xa22, 0x18000, 0x6, 0x300000, 0x1ff, 0x1, 0x7, 0x1, 0x32, 0xc86, 0x9, 0x3, 0x9, 0x200, 0x7ff, 0x200, 0x8, 0x2, 0x6, 0xf, 0x44b, 0xe2f, 0xfff, 0x4931, 0x1, 0xf04e, 0x40, 0x1, 0x6, 0xed50, 0x9, 0xb69d, 0x95b2, 0xf, 0x9, 0x100, 0x4, 0x8, 0x1, 0x5, 0xfffffb45, 0xf19e, 0xfffffff8, 0x0, 0x0, 0x3, 0x1e2, 0x86, 0x7ff, 0xa, 0x5, 0x7, 0x1, 0x4, 0x401, 0x1, 0x81, 0xd70c, 0x3, 0x90, 0x0, 0x40, 0x5, 0x9, 0xf970, 0x40, 0x79, 0x14d2, 0x747, 0x3ff, 0x20000000, 0x0, 0x7, 0x10, 0x7f4, 0x2, 0x6, 0x8, 0x8, 0x4, 0x5, 0x2, 0x2, 0x80000001, 0x200, 0x1, 0xff, 0x2, 0xffff, 0xcaf1e88, 0x78, 0x3, 0x4, 0x4, 0x5, 0x0, 0x8001, 0xfffffff4, 0x9f8, 0x80000001, 0xfd, 0xb85, 0x0, 0x3, 0x4, 0x8001, 0x7, 0x2, 0x4, 0x310, 0x7, 0x4, 0xfffffff7, 0xfff, 0xfffffff7, 0x8f8, 0x5, 0x5, 0x1, 0x4, 0x7, 0x2, 0x4, 0x8, 0x8, 0x7, 0x7, 0x0, 0x6, 0x9, 0x5, 0x6, 0xfffffffc, 0x800, 0x2, 0xd9b7, 0x55, 0x0, 0x9, 0x4, 0x0, 0x6, 0x7fff, 0x81, 0xef4, 0x5, 0x5, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x6, 0x94df, 0x0, {0xa6, 0x0, 0x9, 0x6, 0x5, 0x4}, {0xb, 0x1, 0x1d0, 0x6, 0x5, 0x8}, 0x4, 0x4, 0x1b242560}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x1, 0x0, 0x0, 0x9, 0x7, 0xa, 0x6, 0x8, 0x1, 0x7, 0x2, 0x8000000, 0x3a, 0x80, 0x4, 0x5, 0x3, 0x3, 0x0, 0x99, 0x2, 0x7, 0x9, 0x7, 0x6, 0x9, 0x1ff, 0x9, 0x3, 0x6, 0x200, 0x0, 0x401, 0x8, 0xffff, 0x600000, 0x1, 0x131, 0x9, 0x80000000, 0xb67f, 0xb92, 0x8, 0x7, 0xc7, 0x7, 0x9, 0x1, 0x5, 0x6, 0x0, 0x7, 0x744eae0b, 0x1, 0x4, 0x5, 0x6, 0x9, 0x9, 0x32, 0x4, 0x2, 0x0, 0x4, 0x2, 0x7, 0x8, 0x6, 0x0, 0x2, 0x1, 0xfffff709, 0x8, 0x5, 0x3, 0x0, 0x40000000, 0x8a, 0xb6, 0x5, 0x800, 0x7ff, 0x7, 0x3, 0x1000, 0x7, 0x2, 0x4, 0x9, 0x40, 0x1, 0x1, 0x8, 0x5, 0x80000001, 0x7, 0xc, 0xa, 0xcd3, 0x10, 0x4, 0x3cb71253, 0x3b0f, 0x8, 0x8, 0x200, 0x80000001, 0x9, 0x5, 0x6, 0x6, 0x7, 0x60000, 0xb4b, 0x2000, 0x1, 0x7, 0x7ff, 0x4a9a, 0xf, 0x7, 0x101, 0x10, 0x2, 0x8, 0x9dd, 0x4, 0x9, 0xef6b, 0x800, 0x8, 0x6, 0x8, 0x7, 0x6, 0x10001, 0x8, 0x8, 0x2, 0x8, 0x0, 0xff, 0x7f, 0x0, 0xd, 0xffffff88, 0x80000001, 0x7f, 0x7, 0x97, 0x81, 0x8, 0x40, 0x7ff, 0xcc, 0xfff, 0xff, 0x101, 0x80000001, 0x101, 0x80000001, 0xf6ec, 0x5, 0xfffffffa, 0x8, 0x79, 0xfff, 0xfffffffa, 0x7, 0x5, 0x9, 0x6ebd, 0xb, 0x2, 0x2, 0x31b, 0x81, 0xffffff80, 0x3, 0x60d, 0xa, 0x1, 0x80000001, 0x3, 0xc62, 0x10001, 0x7b1a, 0x2, 0x1, 0xb97, 0x8, 0x8, 0x8, 0x7, 0x5, 0x8, 0x8, 0x8, 0xfffffffb, 0x7ffe8371, 0xa07, 0xfffffff8, 0x7f, 0x1, 0x9, 0x0, 0x0, 0x77f1, 0x9, 0x0, 0xff, 0x8, 0x7fff, 0x0, 0x6, 0xe2e, 0x7, 0x9, 0x5, 0xc673, 0x9, 0xf7a, 0xffffffff, 0x7, 0x0, 0x7f, 0x8, 0xffff, 0x5, 0xabd, 0x7ff, 0x1, 0x7ff, 0x4, 0x7, 0x401, 0x1, 0x5, 0xff, 0x5, 0x6, 0x8a9, 0x0, 0x4, 0x7, 0x40, 0x4f, 0x7, 0x7c7, 0x1, 0x835c, 0x6, 0x5, 0x7f8d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2040000, 0x10e, 0x9, 0xa, 0x0, 0x1000, 0x9, 0x46, 0x100, 0x5, 0x8000, 0x4, 0x80000001, 0x313e, 0xfffffff4, 0x3, 0x8, 0x80000000, 0x2, 0x8, 0xffffffff, 0x81, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x0, 0xf, 0x6, 0x2, 0x6, 0x3, 0x7f, 0x0, 0xffffff01, 0x6, 0xc642, 0x6, 0xa0, 0x5, 0x2, 0x9c4, 0x8, 0xffff8001, 0x57f91e97, 0x100, 0x401, 0x6, 0x6, 0x4, 0x51, 0xe3c, 0x5, 0x3, 0x5, 0x9, 0x0, 0x2, 0x6, 0x7, 0x2, 0x0, 0x8, 0xfff, 0x2, 0xb8cf, 0xffff, 0x9, 0x7, 0xffffffff, 0x800, 0x6, 0x9, 0x2, 0x6, 0x1, 0x3, 0x1, 0xfffffff5, 0x101, 0x3811, 0x7, 0x0, 0x2, 0x8, 0x1, 0x7, 0x4, 0x6, 0xe, 0x6, 0x3fe2, 0x3, 0x80000001, 0x5, 0xc, 0xfffffffc, 0xfffffff9, 0xf, 0xdfe, 0x1, 0xfffffff9, 0x3ff, 0x63d4, 0x4, 0x3, 0x6, 0x400, 0xffffffff, 0x4, 0x2, 0x2, 0x2, 0x5, 0x5, 0x0, 0x100, 0x10001, 0xd7, 0x42ca, 0x0, 0x1, 0x9, 0x1, 0x800, 0xffff, 0xe57, 0x5, 0x3, 0x4, 0x1, 0x2, 0x6, 0x6, 0x1, 0xcc4e, 0x2, 0x8, 0x5, 0x4, 0x2, 0x5, 0xfffff69f, 0x7ff, 0xd, 0xe, 0x6, 0x5cad839c, 0xe4, 0xb, 0x8, 0x3, 0x5, 0x4971, 0x4, 0x9, 0x8, 0xf4f, 0x2, 0xbe4a, 0x10000000, 0x3, 0x7fffffff, 0x9, 0x1, 0x8000, 0x2, 0xffff, 0x8000, 0x4, 0x23f, 0x77b, 0x9, 0x3ff, 0x1cbc, 0x400, 0x1, 0x11, 0x8, 0x4, 0x10001, 0x0, 0x10000, 0x1, 0xf, 0x5, 0x2, 0x20cb, 0x100, 0xb, 0x101, 0xe, 0xe0, 0x5, 0xffffffff, 0x80000001, 0x10001, 0x40, 0x6, 0x4000000, 0xa21c, 0x3, 0x1, 0xb139b5b, 0x8001, 0xfffffffa, 0x5, 0x5, 0xffff, 0x10001, 0x0, 0x2, 0x5, 0x5, 0xb3dc, 0x10, 0xffffff5e, 0x400, 0x9, 0x35fa, 0x6, 0x3, 0x1, 0x2, 0x1, 0x5, 0x2, 0xffff46d0, 0x8, 0x8, 0x1, 0xf2, 0x6, 0x2, 0x3ff, 0x9, 0xd23e, 0x180000, 0x10, 0x0, 0x7f, 0xd, 0x9, 0x3, 0x4, 0x3, 0x1, 0x37, 0x9, 0x7]}], []]}, {0xbd, 0x6, "a6353d26dc799cdd3c710a5e2cd53712f4b6e8401011b2336127a65da5125716cb72586be726a97d52466e7fd113ad3a63d03b82e58f8d85c78cd280146f8891d2bbc822e178a3d42dc3841cca3053e3018321e33faf06a7a1d77d56963e65c107d0c050fd716fa468594b4ecff956ce94cc32e8417b12f441cd0861ff4809cbcf3c7afde34c534a956c52543cf7a7fec614d1ae706d3a10077aba41f778d4d721a23ff7d173439b9ae10bcf7a7c667acfb76667be4f819ade"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1268}, 0x1, 0x2b1e, 0x0, 0x800}, 0x10000084) 4.832043402s ago: executing program 1 (id=5417): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2c, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r1, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x1, {{@in=@empty, @in=@empty, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0xf0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000091}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa11469f36f6e05ac19078ac1414bba41414aa000012340000000000000000"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c0001"], 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4.818470572s ago: executing program 4 (id=5418): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x4000014) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x20008001) r2 = syz_genetlink_get_family_id$wireguard(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25047c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x14008084}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000040)={0x9a4, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x6d0, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "207615a55e7d4ff053f9a9d286b44a6eafa13f10f3d927fb8e60c8b192863dd5"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa3a3}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "785511fafe6e54738cc2cb37db0fc39b12d0a4b26bacb82113cdb9ccb34523ad"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x224, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2dc6cc9e41607203e353ef4b330af3cac536835807f7872731779c3b96879b0"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7f, @empty, 0xfffffffd}}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x9}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5}}]}]}]}, {0x26c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8d1de987b1a27fc54571ca476398c6d33b6e7f51391517cda51209a21af50cc5"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x170, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "25904f5476e877935bf043dadb94839ca7eb7ce9e2845e8d7da717b2a3657c2d"}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xc8, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4eb033f9fefe3b3f6f1359a6ab927ac85ea374f65a594288391a088607b9348f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe55}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "957b49286d561eebf61f332d4bc0a8eb0f12a09e1b956d38edee424b9bbdd146"}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @remote, 0x3}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9c}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x4000}, 0x890) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40081) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0x10, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7, 0x864, 0x9, {0x0, 0x2710}, {0x0, 0x2710}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "11014997ae5cecf8f8a0afd7b41d01b027b4b6ccc4deaa762057426564534e28a3130100d38689f97120162ac420f929f1b15cbf0e741e0c42251a110921e623"}}, 0x80}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) 4.687402718s ago: executing program 3 (id=5419): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) socket$nl_route(0x10, 0x3, 0x0) 4.470677494s ago: executing program 4 (id=5420): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x84, 0x20, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.059696843s ago: executing program 0 (id=5422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0xb) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 4.01581949s ago: executing program 4 (id=5423): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb08004560c812d0607bce11b6a8e75c0000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd408e40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000c1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) 3.83257967s ago: executing program 3 (id=5425): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003540)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0xfe}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) (async) accept4(r5, 0x0, 0x0, 0x0) 3.664501109s ago: executing program 0 (id=5426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) 3.375956173s ago: executing program 0 (id=5427): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0xd2857df73be921dd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) 3.076093921s ago: executing program 0 (id=5428): socket$igmp6(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e002a3afffe800000000000000000000000000000ff0200000000000000000000000000018900907800fd830020010000000000000000000000000000fc010000000000000000000000000000040071b4da8555618f66aa2ee34a40c43980239fdda821d504c8b49dd87df696a18f61aca8609fc73685"], 0x0) 3.075706451s ago: executing program 4 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_emit_ethernet(0x12, &(0x7f00000006c0)={@empty, @empty, @val={@void, {0x8100, 0x2}}, {@generic={0x8914}}}, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x45, 0xc, "4d8109db75335230650a9f18ac00577a3a825068be67686e01a000166585b404edd469f00bf3d737252f0db8eaf9de49c8fa072966105156ad73917c2ecce6b574"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x69, 0xc, "49e8880eef191c6394f270a4c53bcb6e439044227bbb7fb245dbddce4253ece19a75a2dab4383b60d57b6abd9c8df2f5509d3b93328749b3caaf0cd04e4add556dd5513105dda15bc6292374fea419fee2bc6985016c69fe192e4a93b413643781c7e79ffb"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0xa}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x1a0}}, 0x0) 3.033501961s ago: executing program 3 (id=5430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x1, 0x3, 0xfd2, 0x6, 0x9}, [{0x6, 0x8, 0x9, 0x67}, {0x4, 0x4, 0x8}, {0x100, 0x8, 0x0, 0x9}, {0xff, 0x7, 0x8, 0xd}, {0xfffffffffffffffe, 0x81, 0x8, 0x6}]}) 2.966190748s ago: executing program 2 (id=5431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000feff00000000020000000900020073797a31000000000800044000000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) r2 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000280)=0x80, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000440)='.}-\x00', 0x181081, &(0x7f0000000480)={@_ha_fsid={[0x8, 0x4]}, {0x0, 0xaec, 0x0, 0x7f45}}, 0xffffffff, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x2}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040081}, 0x81) 2.795517s ago: executing program 0 (id=5432): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) 2.795028936s ago: executing program 3 (id=5433): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x1, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) 2.650629716s ago: executing program 1 (id=5434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xcc}}, 0x0) 2.494332192s ago: executing program 4 (id=5435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 1.923999133s ago: executing program 1 (id=5436): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000001300)=""/4096, &(0x7f0000002300)=0x1000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}, 0x1, 0xffffffffffffff83}, 0x0) 1.923197522s ago: executing program 2 (id=5437): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000001e"], 0x9c}}, 0x0) 1.707084661s ago: executing program 3 (id=5438): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.697922116s ago: executing program 0 (id=5439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e785", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='j\x00\b\x00', @ANYRES16=r5, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000042fc8200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000ea51ca98bd21226e3cb798ca5ecf5cb9c9d82b631f1d1659c01179cebdba66be9554ac3f60517eee3053655ef67a94ca02f6dd136563e363958b89179e8f3de97f058b7ad7eaf39686e44be6f41730f17260956da40a856afd309ccda85a21a7b94df8da80bfe57c999ff603971ede7385c41b24057b4cf18381731cabd09e56bcce25bc93af1f88c55b74d03baf70c89b2533ae018a7b408e59d68d2e201605945e69ec1482aeda5a82f82ca7a6619ca3148ff6ac52aeb52b4592183da8eb2f9c5f3d23", @ANYRES16=r6, @ANYBLOB="040026bd7000fbdbdf250c0000000c0001800800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40042}, 0x840) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r9, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'veth0_virt_wifi\x00', 0x1}) 1.631884146s ago: executing program 2 (id=5440): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454194e544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b5526", @ANYRES32=0x0, @ANYRES32], 0x1bc}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x100}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x22, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0x7, 0x9, 0xa, 0x8, 0x4}, @ringbuf_query, @generic={0x8, 0x0, 0x8, 0x8, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x1, 0x3, 0x2, 0xa, 0x8, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0xe4, &(0x7f0000000900)=""/228, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x2, 0x40, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0xb, 0xae66, 0x98d, 0x8, 0xffffffffffffffff, 0x221, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r6, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x21, 0xffff0dcb, 0x10000, 0x318d, 0x14004, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{}, &(0x7f0000000c80), &(0x7f0000000cc0)='%ps \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000e40)={r1, &(0x7f0000000d40)='\\\x00', 0x100, &(0x7f0000000d80)={@_ha_fsid={[0x800]}, {0x49, 0x3, 0x3}}, 0x5, &(0x7f0000000dc0)={@_ha_fsid}, &(0x7f0000000e00)=0x9}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x9, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) 1.551140953s ago: executing program 1 (id=5441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)='\'', 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) 1.483595151s ago: executing program 4 (id=5442): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40400a0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) (async) close(r7) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) recvmmsg(r8, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xc7}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000000180)=""/218, 0xda}], 0x4}, 0x19}], 0x3, 0x0, 0x0) 1.343968491s ago: executing program 3 (id=5443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@empty, @broadcast}, 0xc) syz_emit_ethernet(0x170, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff", 0x10}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d3800091115c000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000a00)={&(0x7f0000000000)=0x8, 0xec, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000009c0)}) socket$l2tp(0x2, 0x2, 0x73) 383.686562ms ago: executing program 2 (id=5444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0) 212.540004ms ago: executing program 2 (id=5445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=5446): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r4, 0xf5f) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000140)) accept(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x80, 0x51792e7248df3b14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): isabling bearer [ 460.830150][T19000] SET target dimension over the limit! [ 461.001556][T19016] netlink: 'syz.1.3758': attribute type 1 has an invalid length. [ 461.151219][T19016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.253226][T19021] bond3: (slave veth0_to_bond): Releasing active interface [ 461.285248][T19021] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 461.306591][T19023] macvlan2: entered promiscuous mode [ 461.306615][T19023] macvlan2: entered allmulticast mode [ 461.307238][T19023] bond4: entered promiscuous mode [ 461.307900][T19023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.308691][T19023] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 461.355320][T19023] bond4: left promiscuous mode [ 461.598992][T19030] netlink: 'syz.0.3761': attribute type 2 has an invalid length. [ 461.610734][T19031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 461.898168][T19045] ip_tables: iptables: counters copy to user failed while replacing table [ 461.960675][T19039] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 461.970006][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 462.027301][T19045] tipc: Started in network mode [ 462.027338][T19045] tipc: Node identity ac1414aa, cluster identity 4711 [ 462.027619][T19045] tipc: New replicast peer: 172.20.20.187 [ 462.028916][T19045] tipc: Enabled bearer , priority 10 [ 462.065603][T19040] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 462.438779][T19049] h: entered promiscuous mode [ 462.521891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.577955][T19052] netlink: 'syz.2.3767': attribute type 2 has an invalid length. [ 462.686782][ T5621] Bluetooth: hci5: command 0x0c20 tx timeout [ 462.819615][T19066] __nla_validate_parse: 23 callbacks suppressed [ 462.819639][T19066] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3770'. [ 462.848500][T19056] syzkaller0: entered promiscuous mode [ 462.848527][T19056] syzkaller0: entered allmulticast mode [ 463.139949][ T5772] tipc: Node number set to 2886997162 [ 463.148511][T19073] syzkaller0: entered promiscuous mode [ 463.148715][T19073] syzkaller0: entered allmulticast mode [ 463.384895][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3774'. [ 463.606855][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'. [ 463.710601][T19094] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.763396][T19103] Cannot find add_set index 0 as target [ 463.815437][T19103] syzkaller1: entered promiscuous mode [ 463.815825][T19103] syzkaller1: entered allmulticast mode [ 463.907812][T19107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3781'. [ 464.039557][T19115] Cannot find add_set index 0 as target [ 464.405649][T19128] bridge2: entered promiscuous mode [ 464.405715][T19128] bridge2: entered allmulticast mode [ 464.518618][T19130] pimreg: entered allmulticast mode [ 466.416312][T19083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.796188][T19145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3790'. [ 466.903266][T19152] syzkaller0: entered promiscuous mode [ 466.903458][T19152] syzkaller0: entered allmulticast mode [ 466.953100][T19154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3794'. [ 466.959239][T19154] ip6_vti0: entered promiscuous mode [ 466.985684][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 467.094244][T19159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3796'. [ 467.140200][T19162] netlink: 'syz.4.3795': attribute type 39 has an invalid length. [ 468.611370][ T3307] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.612357][ T3307] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.646668][ T3307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.646718][ T3307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.794004][T19210] openvswitch: netlink: IPv4 tun info is not correct [ 469.391225][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 469.450901][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3814'. [ 469.618574][T19235] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 469.630903][T19235] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 469.630991][T19235] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 469.751444][T19240] netlink: 'syz.0.3816': attribute type 11 has an invalid length. [ 469.751973][T19240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3816'. [ 469.752004][T19240] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 470.278575][T19256] netlink: 'syz.1.3823': attribute type 6 has an invalid length. [ 470.296816][T19256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3823'. [ 470.341866][T19257] ip6erspan0: entered allmulticast mode [ 470.512045][T19259] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 470.734593][T19259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.739267][T19261] veth0_to_bond: left allmulticast mode [ 470.840647][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 470.903662][T19261] bond2: (slave veth0_to_bond): making interface the new active one [ 470.905451][T19261] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 470.938645][T19262] macvlan2: entered promiscuous mode [ 470.938679][T19262] macvlan2: entered allmulticast mode [ 470.939317][T19262] bond2: entered promiscuous mode [ 470.939334][T19262] veth0_to_bond: entered promiscuous mode [ 470.964211][T19262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.965119][T19262] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 470.965276][T19262] bond2: left promiscuous mode [ 470.965293][T19262] veth0_to_bond: left promiscuous mode [ 471.129562][T19270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3826'. [ 471.220632][T19272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3826'. [ 471.224692][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3829'. [ 471.227539][T19274] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 471.306250][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 471.306280][T19278] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3828'. [ 471.498211][T19275] syzkaller0: entered promiscuous mode [ 471.498239][T19275] syzkaller0: entered allmulticast mode [ 471.529081][T19269] xt_l2tp: wrong L2TP version: 255 [ 471.688146][T19288] syzkaller0: entered promiscuous mode [ 471.688172][T19288] syzkaller0: entered allmulticast mode [ 472.277057][T19305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3838'. [ 472.935657][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 473.271534][T17926] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.275959][T17926] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.276008][T17926] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.070714][T19377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.618762][T19398] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 474.619464][T19398] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 474.619629][T19399] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 475.189726][T19403] hsr0: entered allmulticast mode [ 475.192986][T19403] hsr_slave_0: entered allmulticast mode [ 475.193019][T19403] hsr_slave_1: entered allmulticast mode [ 476.387732][T19349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.784337][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.331062][T19432] openvswitch: netlink: Port 2228225 exceeds max allowable 65535 [ 477.724780][T19442] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 477.724900][T19442] syzkaller1: Refused to change device type [ 478.232606][T19459] __nla_validate_parse: 9 callbacks suppressed [ 478.232669][T19459] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3886'. [ 478.604622][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3890'. [ 478.681851][T19467] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3890'. [ 478.682945][T19470] openvswitch: netlink: Port 14942209 exceeds max allowable 65535 [ 478.752023][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 478.916666][T19472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.075125][T19475] vlan3: entered promiscuous mode [ 479.075151][T19475] bond3: entered promiscuous mode [ 479.104030][T19475] vlan3: entered allmulticast mode [ 479.104057][T19475] bond3: entered allmulticast mode [ 479.122022][T19482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.197332][T19488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3897'. [ 479.728215][T19493] netlink: 'syz.1.3899': attribute type 11 has an invalid length. [ 479.954775][T19511] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 480.095374][T19516] netlink: 'syz.4.3905': attribute type 21 has an invalid length. [ 480.335102][T19520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3908'. [ 480.349198][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 480.734424][T19527] xt_TCPMSS: Only works on TCP SYN packets [ 481.076626][T19532] netlink: Failed to add helper -22 [ 481.076688][T19532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.757128][T19556] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 481.937838][T19556] bond6: entered promiscuous mode [ 481.937866][T19556] bond6: entered allmulticast mode [ 481.938294][T19556] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.027117][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'. [ 482.626861][T19593] bridge0: port 1(bridge_slave_0) entered listening state [ 482.908278][T19605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3927'. [ 483.077122][T19609] erspan1: entered allmulticast mode [ 483.129403][T19609] bond6: (slave erspan1): making interface the new active one [ 483.129433][T19609] erspan1: entered promiscuous mode [ 483.194226][T19609] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 483.784050][T19630] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3931'. [ 483.933945][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 483.933972][T19633] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3934'. [ 484.085866][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 484.303464][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 484.363494][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 484.365941][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3936'. [ 484.549535][T19649] x_tables: duplicate underflow at hook 3 [ 485.125442][ T4937] Bluetooth: hci3: ISO packet too small [ 485.213027][T19679] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3947'. [ 485.259218][T17933] tipc: Subscription rejected, illegal request [ 485.371064][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 485.371097][T19685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3950'. [ 486.078636][T19703] netlink: 'syz.0.3955': attribute type 10 has an invalid length. [ 486.187979][T19703] geneve3: entered promiscuous mode [ 486.188006][T19703] geneve3: entered allmulticast mode [ 486.533229][T19715] netlink: 'syz.2.3959': attribute type 1 has an invalid length. [ 487.296409][T19739] bond5: option xmit_hash_policy: invalid value (64) [ 487.308844][T19739] bond5 (unregistering): Released all slaves [ 487.480213][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.702393][T19751] blkio.reset_stats is deprecated [ 487.717362][T19753] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 487.720867][T19753] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 487.741684][T19753] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 487.744155][T19753] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 488.179907][T19753] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 489.439219][T19805] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 489.556682][T19805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.596107][T19818] __nla_validate_parse: 10 callbacks suppressed [ 489.596132][T19818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3989'. [ 489.697543][T19809] bond2: (slave veth0_to_bond): Releasing active interface [ 489.785059][T19809] bond4: (slave veth0_to_bond): making interface the new active one [ 489.802130][T19809] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 489.883275][T19805] macvlan2: entered promiscuous mode [ 489.883303][T19805] macvlan2: entered allmulticast mode [ 489.886727][T19805] bond4: entered promiscuous mode [ 489.886751][T19805] veth0_to_bond: entered promiscuous mode [ 489.889561][T19805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 489.920272][T19805] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 489.920442][T19805] bond4: left promiscuous mode [ 489.920459][T19805] veth0_to_bond: left promiscuous mode [ 489.963317][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 490.106215][T19827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3991'. [ 490.174075][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3991'. [ 490.594373][T19837] bond2: (slave veth0_to_bond): Releasing backup interface [ 490.708014][T19842] tap0: tun_chr_ioctl cmd 2148553947 [ 491.098892][T19854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4000'. [ 491.306036][T19860] openvswitch: netlink: Message has 48 unknown bytes. [ 491.403020][T19862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4004'. [ 491.403061][T19862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4004'. [ 491.476991][T19862] geneve3: entered promiscuous mode [ 491.699814][T19869] x_tables: duplicate entry at hook 2 [ 491.729113][T19875] netlink: NAT attribute has 5 unknown bytes [ 491.729145][T19875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.786085][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 492.020714][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4009'. [ 492.026706][T19881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4010'. [ 492.026734][T19881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4010'. [ 492.067575][T19882] bond4: (slave veth0_to_bond): Releasing active interface [ 492.514410][T19892] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 493.028420][T19911] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 493.400347][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 493.437205][T19940] xt_limit: Overflow, try lower: 536871034/0 [ 495.455657][T19897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.883696][T19952] xfrm1: entered allmulticast mode [ 496.465794][T19973] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 496.481413][T19957] __nla_validate_parse: 7 callbacks suppressed [ 496.481435][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4033'. [ 496.525723][T19970] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 496.657676][T19982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4040'. [ 497.113760][T19990] tipc: Enabling of bearer rejected, failed to enable media [ 497.282937][T19993] netlink: 'syz.2.4045': attribute type 2 has an invalid length. [ 497.282965][T19993] netlink: 'syz.2.4045': attribute type 2 has an invalid length. [ 497.615033][T20009] openvswitch: netlink: Key type 8196 is out of range max 32 [ 498.131814][T20030] FAULT_INJECTION: forcing a failure. [ 498.131814][T20030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.131853][T20030] CPU: 0 UID: 0 PID: 20030 Comm: syz.0.4056 Not tainted syzkaller #0 PREEMPT(full) [ 498.131880][T20030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.131894][T20030] Call Trace: [ 498.131994][T20030] [ 498.132071][T20030] dump_stack_lvl+0xe8/0x150 [ 498.132215][T20030] should_fail_ex+0x410/0x560 [ 498.132323][T20030] _copy_from_iter+0x1d3/0x1660 [ 498.132393][T20030] ? skb_set_owner_w+0x263/0x3d0 [ 498.132537][T20030] ? __pfx__copy_from_iter+0x10/0x10 [ 498.132572][T20030] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 498.132609][T20030] skb_copy_datagram_from_iter+0xe6/0x720 [ 498.132672][T20030] ? dev_get_by_index+0x22/0x2d0 [ 498.132731][T20030] ? skb_put+0x112/0x210 [ 498.132763][T20030] packet_sendmsg+0x35e2/0x4f80 [ 498.132873][T20030] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 498.132959][T20030] ? __lock_acquire+0x747/0x2de0 [ 498.133011][T20030] ? kstrtouint+0x6e/0xe0 [ 498.133077][T20030] ? __pfx_packet_sendmsg+0x10/0x10 [ 498.133100][T20030] ? aa_sk_perm+0x713/0x900 [ 498.133132][T20030] ? debug_mutex_wake_waiter+0x50/0x230 [ 498.133167][T20030] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.133197][T20030] ? aa_sock_msg_perm+0x144/0x210 [ 498.133258][T20030] ? apparmor_socket_sendmsg+0x98/0x360 [ 498.133286][T20030] ? __pfx_packet_sendmsg+0x10/0x10 [ 498.133309][T20030] sock_sendmsg_nosec+0x13a/0x180 [ 498.133336][T20030] __sys_sendto+0x408/0x5a0 [ 498.133364][T20030] ? ksys_write+0x1e6/0x270 [ 498.133431][T20030] ? __pfx___sys_sendto+0x10/0x10 [ 498.133457][T20030] ? __mutex_unlock_slowpath+0x731/0x900 [ 498.133571][T20030] ? __pfx_ksys_write+0x10/0x10 [ 498.133611][T20030] __x64_sys_sendto+0xde/0x100 [ 498.133643][T20030] do_syscall_64+0x166/0x520 [ 498.133716][T20030] ? trace_irq_disable+0x3b/0x140 [ 498.133760][T20030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.133806][T20030] ? clear_bhb_loop+0x70/0xc0 [ 498.133834][T20030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.133856][T20030] RIP: 0033:0x7f003579e159 [ 498.133905][T20030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.133955][T20030] RSP: 002b:00007f003662c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.134013][T20030] RAX: ffffffffffffffda RBX: 00007f0035a25fa0 RCX: 00007f003579e159 [ 498.134030][T20030] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000004 [ 498.134045][T20030] RBP: 00007f003662c090 R08: 0000200000000140 R09: 0000000000000014 [ 498.134060][T20030] R10: 0000000004008005 R11: 0000000000000246 R12: 0000000000000001 [ 498.134074][T20030] R13: 00007f0035a26038 R14: 00007f0035a25fa0 R15: 00007ffea6aae378 [ 498.134111][T20030] [ 498.568755][T20034] netlink: 'syz.1.4055': attribute type 3 has an invalid length. [ 498.628632][T20034] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 499.397691][T20043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.469606][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4061'. [ 499.546197][T20003] infiniband sz1: set down [ 499.546223][T20003] infiniband sz1: added team0 [ 499.587207][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 499.612161][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 499.685491][T20003] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 499.685537][T20003] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 499.685591][T20003] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 499.961351][T20003] RDS/IB: sz1: added [ 499.997460][T20003] smc: adding ib device sz1 with port count 1 [ 499.997616][T20003] smc: ib device sz1 port 1 has no pnetid [ 500.159810][T20067] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4066'. [ 500.366769][T20072] FAULT_INJECTION: forcing a failure. [ 500.366769][T20072] name failslab, interval 1, probability 0, space 0, times 0 [ 500.366805][T20072] CPU: 1 UID: 0 PID: 20072 Comm: syz.3.4068 Not tainted syzkaller #0 PREEMPT(full) [ 500.366831][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.366845][T20072] Call Trace: [ 500.366854][T20072] [ 500.366864][T20072] dump_stack_lvl+0xe8/0x150 [ 500.366904][T20072] should_fail_ex+0x410/0x560 [ 500.366937][T20072] should_failslab+0xa8/0x100 [ 500.367013][T20072] ? skb_clone+0x212/0x3a0 [ 500.367046][T20072] kmem_cache_alloc_noprof+0xa1/0x600 [ 500.367093][T20072] ? lock_acquire+0x115/0x350 [ 500.367119][T20072] ? skb_clone+0x212/0x3a0 [ 500.367162][T20072] skb_clone+0x212/0x3a0 [ 500.367193][T20072] ? dev_queue_xmit_nit+0x270/0xac0 [ 500.367298][T20072] dev_queue_xmit_nit+0x28d/0xac0 [ 500.367328][T20072] ? dev_queue_xmit_nit+0x2d/0xac0 [ 500.367366][T20072] dev_hard_start_xmit+0x1c1/0x830 [ 500.367417][T20072] __dev_queue_xmit+0x14c0/0x3820 [ 500.367465][T20072] ? __dev_queue_xmit+0x29b/0x3820 [ 500.367503][T20072] ? _copy_from_iter+0x21b/0x1660 [ 500.367528][T20072] ? skb_set_owner_w+0x263/0x3d0 [ 500.367563][T20072] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.367605][T20072] ? __pfx__copy_from_iter+0x10/0x10 [ 500.367649][T20072] ? __pfx_packet_parse_headers+0x10/0x10 [ 500.367685][T20072] ? packet_xmit+0x68/0x330 [ 500.367711][T20072] ? skb_put+0x112/0x210 [ 500.367743][T20072] packet_sendmsg+0x3d0d/0x4f80 [ 500.367783][T20072] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 500.367835][T20072] ? __lock_acquire+0x747/0x2de0 [ 500.367865][T20072] ? kstrtouint+0x6e/0xe0 [ 500.367909][T20072] ? __pfx_packet_sendmsg+0x10/0x10 [ 500.367932][T20072] ? aa_sk_perm+0x713/0x900 [ 500.367973][T20072] ? debug_mutex_wake_waiter+0x50/0x230 [ 500.368009][T20072] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.368039][T20072] ? aa_sock_msg_perm+0x144/0x210 [ 500.368081][T20072] ? apparmor_socket_sendmsg+0x98/0x360 [ 500.368110][T20072] ? __pfx_packet_sendmsg+0x10/0x10 [ 500.368134][T20072] sock_sendmsg_nosec+0x13a/0x180 [ 500.368161][T20072] __sys_sendto+0x408/0x5a0 [ 500.368190][T20072] ? ksys_write+0x1e6/0x270 [ 500.368229][T20072] ? __pfx___sys_sendto+0x10/0x10 [ 500.368255][T20072] ? __mutex_unlock_slowpath+0x731/0x900 [ 500.368319][T20072] ? __pfx_ksys_write+0x10/0x10 [ 500.368361][T20072] __x64_sys_sendto+0xde/0x100 [ 500.368394][T20072] do_syscall_64+0x166/0x520 [ 500.368422][T20072] ? trace_irq_disable+0x3b/0x140 [ 500.368445][T20072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.368470][T20072] ? clear_bhb_loop+0x70/0xc0 [ 500.368499][T20072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.368522][T20072] RIP: 0033:0x7f418c39e159 [ 500.368544][T20072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.368564][T20072] RSP: 002b:00007f418d343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 500.368589][T20072] RAX: ffffffffffffffda RBX: 00007f418c625fa0 RCX: 00007f418c39e159 [ 500.368608][T20072] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000004 [ 500.368625][T20072] RBP: 00007f418d343090 R08: 0000200000000140 R09: 0000000000000014 [ 500.368641][T20072] R10: 0000000004008005 R11: 0000000000000246 R12: 0000000000000001 [ 500.368657][T20072] R13: 00007f418c626038 R14: 00007f418c625fa0 R15: 00007ffefe778ca8 [ 500.368696][T20072] [ 501.586472][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.587087][ T1314] ieee802154 phy2 wpan0: encryption failed: -22 [ 501.910001][T17926] IPVS: starting estimator thread 0... [ 501.987741][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4074'. [ 502.109931][T20099] IPVS: using max 27 ests per chain, 64800 per kthread [ 502.718126][T20116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.758403][T20116] team0: Port device bond5 added [ 502.783052][T20122] netlink: 'syz.1.4083': attribute type 1 has an invalid length. [ 502.884037][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4083'. [ 503.014599][T20122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.128077][T20134] x_tables: duplicate entry at hook 1 [ 503.621716][T20151] openvswitch: netlink: Duplicate or invalid key (type 0). [ 503.665850][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4093'. [ 503.857278][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.857603][T20162] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.923294][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.952591][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'. [ 504.268166][ C0] TC_ACT_REPEAT abuse ? [ 504.371561][ C0] TC_ACT_REPEAT abuse ? [ 504.436964][T20178] sctp: [Deprecated]: syz.1.4100 (pid 20178) Use of int in max_burst socket option deprecated. [ 504.436964][T20178] Use struct sctp_assoc_value instead [ 504.473065][ C0] TC_ACT_REPEAT abuse ? [ 504.598443][T20184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.677735][ C0] TC_ACT_REPEAT abuse ? [ 504.780346][ C0] TC_ACT_REPEAT abuse ? [ 504.882562][ C0] TC_ACT_REPEAT abuse ? [ 504.985006][ C0] TC_ACT_REPEAT abuse ? [ 505.087438][ C0] TC_ACT_REPEAT abuse ? [ 505.189839][ C0] TC_ACT_REPEAT abuse ? [ 505.421059][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4104'. [ 505.543530][T20192] netlink: 'syz.1.4105': attribute type 1 has an invalid length. [ 505.690183][T20192] 8021q: adding VLAN 0 to HW filter on device bond9 [ 505.747277][T20197] bond4: (slave veth0_to_bond): Releasing active interface [ 505.774469][T20197] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 505.808650][T20198] macvlan2: entered promiscuous mode [ 505.808677][T20198] macvlan2: entered allmulticast mode [ 505.809329][T20198] bond9: entered promiscuous mode [ 505.828267][T20198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 505.829125][T20198] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 505.854548][T20198] bond9: left promiscuous mode [ 506.506790][T20210] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 506.630466][T20218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 506.634193][T20218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4109'. [ 507.363444][T20244] netlink: 'syz.2.4118': attribute type 1 has an invalid length. [ 507.581178][T20244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.629632][T20246] bond4: (slave veth0_to_bond): making interface the new active one [ 507.639671][T20246] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.693459][T20248] macvlan3: entered promiscuous mode [ 507.693488][T20248] macvlan3: entered allmulticast mode [ 507.694429][T20248] bond4: entered promiscuous mode [ 507.694450][T20248] veth0_to_bond: entered promiscuous mode [ 507.695457][T20248] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 507.696422][T20248] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 507.696561][T20248] bond4: left promiscuous mode [ 507.696577][T20248] veth0_to_bond: left promiscuous mode [ 508.184829][T20272] __nla_validate_parse: 1 callbacks suppressed [ 508.184853][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 508.184870][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 508.377213][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4124'. [ 508.377241][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.377434][T20272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.414245][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.414453][T20272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.671793][ C0] net_ratelimit: 34 callbacks suppressed [ 508.671918][ C0] TC_ACT_REPEAT abuse ? [ 508.716585][T20289] Bluetooth: ISO socket layer initialized [ 508.737545][ T52] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 508.773872][ C0] TC_ACT_REPEAT abuse ? [ 508.879096][ C0] TC_ACT_REPEAT abuse ? [ 508.978681][ C0] TC_ACT_REPEAT abuse ? [ 509.080975][ C0] TC_ACT_REPEAT abuse ? [ 509.183366][ C0] TC_ACT_REPEAT abuse ? [ 509.285896][ C0] TC_ACT_REPEAT abuse ? [ 509.331981][T20304] netlink: 'syz.3.4135': attribute type 1 has an invalid length. [ 509.390008][ C0] TC_ACT_REPEAT abuse ? [ 509.413617][T20304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.464885][T20304] bond4: (slave veth0_to_bond): making interface the new active one [ 509.468834][T20304] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.490744][ C0] TC_ACT_REPEAT abuse ? [ 509.581062][T20304] macvlan2: entered promiscuous mode [ 509.581091][T20304] macvlan2: entered allmulticast mode [ 509.583393][T20304] bond4: entered promiscuous mode [ 509.583417][T20304] veth0_to_bond: entered promiscuous mode [ 509.601899][ C0] TC_ACT_REPEAT abuse ? [ 509.607835][T20304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.638261][T20304] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 509.638428][T20304] bond4: left promiscuous mode [ 509.638445][T20304] veth0_to_bond: left promiscuous mode [ 509.697357][T20308] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.4136'. [ 510.645523][T20340] block nbd3: server does not support multiple connections per device. [ 510.649131][T20340] block nbd3: shutting down sockets [ 511.319568][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'. [ 511.366522][T20362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4150'. [ 511.366553][T20362] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 511.366569][T20362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4150'. [ 511.467513][T20364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4151'. [ 511.839774][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 511.839863][T20378] bond3: left allmulticast mode [ 511.840950][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 511.842389][T20378] bond3: left promiscuous mode [ 511.861736][T20378] bridge0: port 3(bond3) entered disabled state [ 511.963500][T20378] bridge_slave_1: left allmulticast mode [ 511.967110][T20378] bridge_slave_1: left promiscuous mode [ 511.968089][T20378] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.063141][T20378] bridge_slave_0: left allmulticast mode [ 512.063526][T20378] bridge_slave_0: left promiscuous mode [ 512.064459][T20378] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.305091][T20397] netlink: 'syz.1.4162': attribute type 2 has an invalid length. [ 512.725169][T20416] netlink: 'syz.3.4167': attribute type 58 has an invalid length. [ 513.459353][T20440] __nla_validate_parse: 4 callbacks suppressed [ 513.459380][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4174'. [ 513.501744][T20440] xt_bpf: check failed: parse error [ 513.546541][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4174'. [ 513.689204][ C0] net_ratelimit: 41 callbacks suppressed [ 513.689228][ C0] TC_ACT_REPEAT abuse ? [ 513.791906][ C0] TC_ACT_REPEAT abuse ? [ 513.895644][ C0] TC_ACT_REPEAT abuse ? [ 513.997067][ C0] TC_ACT_REPEAT abuse ? [ 514.098939][ C0] TC_ACT_REPEAT abuse ? [ 514.201605][ C0] TC_ACT_REPEAT abuse ? [ 514.305533][ C0] TC_ACT_REPEAT abuse ? [ 514.406840][ C0] TC_ACT_REPEAT abuse ? [ 514.508282][ C0] TC_ACT_REPEAT abuse ? [ 514.610636][ C0] TC_ACT_REPEAT abuse ? [ 514.903639][T20497] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4189'. [ 514.907913][T20497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4189'. [ 515.068148][T20497] ovs-dp0: entered promiscuous mode [ 515.321680][T20478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.642227][T20468] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 516.495114][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4195'. [ 516.495257][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.566108][T20524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.718895][T20528] syzkaller0: entered promiscuous mode [ 516.719105][T20528] syzkaller0: entered allmulticast mode [ 517.032942][T20539] netlink: 'syz.0.4198': attribute type 4 has an invalid length. [ 517.128384][T20542] netlink: 'syz.3.4200': attribute type 1 has an invalid length. [ 517.387510][T20542] bond5: entered promiscuous mode [ 517.400142][T20542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.511010][T20543] bond5: (slave bridge2): making interface the new active one [ 517.511040][T20543] bridge2: entered promiscuous mode [ 517.537786][T20543] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 517.711569][T20544] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 518.708205][ C0] net_ratelimit: 40 callbacks suppressed [ 518.708231][ C0] TC_ACT_REPEAT abuse ? [ 518.808943][ C0] TC_ACT_REPEAT abuse ? [ 518.911436][ C0] TC_ACT_REPEAT abuse ? [ 519.013702][ C0] TC_ACT_REPEAT abuse ? [ 519.116134][ C0] TC_ACT_REPEAT abuse ? [ 519.222854][ C0] TC_ACT_REPEAT abuse ? [ 519.262033][T20605] netlink: 'syz.0.4220': attribute type 11 has an invalid length. [ 519.320943][ C0] TC_ACT_REPEAT abuse ? [ 519.423345][ C0] TC_ACT_REPEAT abuse ? [ 519.479959][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 519.526044][ C0] TC_ACT_REPEAT abuse ? [ 519.628106][ C0] TC_ACT_REPEAT abuse ? [ 519.681392][T20616] netlink: 'syz.0.4224': attribute type 12 has an invalid length. [ 519.882102][T20621] x_tables: duplicate underflow at hook 1 [ 521.219794][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 521.219820][T20676] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4244'. [ 522.205038][T20701] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4254'. [ 522.205070][T20701] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4254'. [ 522.952723][T20715] bond0: Error: Cannot enslave bond to itself. [ 523.246225][T20724] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4260'. [ 523.402038][T20736] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4262'. [ 523.474288][T20729] IPVS: persistence engine module ip_vs_pe_À not found [ 523.617112][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4265'. [ 523.723988][ C0] net_ratelimit: 42 callbacks suppressed [ 523.724013][ C0] TC_ACT_REPEAT abuse ? [ 523.740766][T20749] macsec1: entered promiscuous mode [ 523.740788][T20749] bridge0: entered promiscuous mode [ 523.741021][T20749] macsec1: entered allmulticast mode [ 523.741036][T20749] bridge0: entered allmulticast mode [ 523.770936][T20749] bridge0: port 4(macsec1) entered blocking state [ 523.787567][T20749] bridge0: port 4(macsec1) entered disabled state [ 523.826374][ C0] TC_ACT_REPEAT abuse ? [ 523.855344][T20749] bridge0: left allmulticast mode [ 523.928958][ C0] TC_ACT_REPEAT abuse ? [ 523.980115][ T25] bridge0: left promiscuous mode [ 524.031345][ C0] TC_ACT_REPEAT abuse ? [ 524.133599][ C0] TC_ACT_REPEAT abuse ? [ 524.236089][ C0] TC_ACT_REPEAT abuse ? [ 524.338803][ C0] TC_ACT_REPEAT abuse ? [ 524.440986][ C0] TC_ACT_REPEAT abuse ? [ 524.543531][ C0] TC_ACT_REPEAT abuse ? [ 524.645576][ C0] TC_ACT_REPEAT abuse ? [ 524.698860][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4271'. [ 525.137909][T20798] netlink: 'syz.2.4275': attribute type 33 has an invalid length. [ 525.167796][T20794] can: request_module (can-proto-0) failed. [ 525.194902][T20798] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 525.198876][T20798] bond5 (unregistering): Released all slaves [ 525.358060][T20807] sz1: rxe_newlink: already configured on team0 [ 525.621596][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 525.621623][T20815] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4281'. [ 525.736321][T20817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.767016][T20811] geneve4: entered promiscuous mode [ 525.767042][T20811] geneve4: entered allmulticast mode [ 525.791528][T17927] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 525.806735][T17935] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 525.807914][T17935] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 525.807954][T17935] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 525.859345][T20821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.920783][T20821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.983489][T20817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.029317][T20827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.531985][T20840] syzkaller1: entered promiscuous mode [ 526.532013][T20840] syzkaller1: entered allmulticast mode [ 527.377302][T20881] __nla_validate_parse: 2 callbacks suppressed [ 527.377330][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 527.379612][T20881] netlink: 'syz.1.4297': attribute type 1 has an invalid length. [ 527.379635][T20881] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4297'. [ 528.104766][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 528.143398][T20898] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4304'. [ 528.144450][T20898] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4304'. [ 528.146831][T20898] 0ªî{X¹¦: renamed from gretap0 [ 528.201822][T20898] 0ªî{X¹¦: left promiscuous mode [ 528.201847][T20898] 0ªî{X¹¦: entered allmulticast mode [ 528.742250][ C0] net_ratelimit: 42 callbacks suppressed [ 528.742275][ C0] TC_ACT_REPEAT abuse ? [ 528.844003][ C0] TC_ACT_REPEAT abuse ? [ 528.947038][ C0] TC_ACT_REPEAT abuse ? [ 529.048811][ C0] TC_ACT_REPEAT abuse ? [ 529.152137][ C0] TC_ACT_REPEAT abuse ? [ 529.254333][ C0] TC_ACT_REPEAT abuse ? [ 529.355017][T20935] netlink: 'syz.3.4313': attribute type 4 has an invalid length. [ 529.355044][T20935] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4313'. [ 529.356052][ C0] TC_ACT_REPEAT abuse ? [ 529.458433][ C0] TC_ACT_REPEAT abuse ? [ 529.560859][ C0] TC_ACT_REPEAT abuse ? [ 529.581346][T20943] syzkaller1: entered promiscuous mode [ 529.581371][T20943] syzkaller1: entered allmulticast mode [ 529.605713][T20943] netlink: 'syz.4.4315': attribute type 39 has an invalid length. [ 529.655808][T20946] netlink: 'syz.4.4315': attribute type 39 has an invalid length. [ 529.664589][ C0] TC_ACT_REPEAT abuse ? [ 530.142124][T20961] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4319'. [ 530.439391][T20950] syzkaller1: entered promiscuous mode [ 530.439418][T20950] syzkaller1: entered allmulticast mode [ 531.155292][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 531.155318][T20995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4329'. [ 531.287699][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 531.774268][T21023] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 532.058918][T21028] lo: entered promiscuous mode [ 532.101645][T21034] xt_IDLETIMER: label is empty or not nul-terminated [ 532.499575][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4343'. [ 532.543209][T21051] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4344'. [ 532.886512][T21064] netlink: 'syz.3.4349': attribute type 10 has an invalid length. [ 532.905457][T21065] netlink: 'syz.3.4349': attribute type 10 has an invalid length. [ 532.948870][T21064] team0: Device veth0_vlan failed to register rx_handler [ 533.026954][T21065] team0: Device veth0_vlan failed to register rx_handler [ 533.302822][T21074] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4353'. [ 533.307016][T21073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 533.307054][T21073] netlink: 'syz.4.4352': attribute type 4 has an invalid length. [ 533.462794][T21079] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 533.466719][T21079] bond6 (unregistering): Released all slaves [ 533.562143][T21080] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 533.595890][T21080] bond6 (unregistering): Released all slaves [ 533.664126][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4357'. [ 533.763377][ C0] net_ratelimit: 41 callbacks suppressed [ 533.763404][ C0] TC_ACT_REPEAT abuse ? [ 533.862590][ C0] TC_ACT_REPEAT abuse ? [ 533.964116][ C0] TC_ACT_REPEAT abuse ? [ 534.066617][ C0] TC_ACT_REPEAT abuse ? [ 534.168751][ C0] TC_ACT_REPEAT abuse ? [ 534.173008][T21094] syzkaller1: entered promiscuous mode [ 534.173518][T21094] syzkaller1: entered allmulticast mode [ 534.271353][ C0] TC_ACT_REPEAT abuse ? [ 534.362773][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 534.379535][ C0] TC_ACT_REPEAT abuse ? [ 534.476191][ C0] TC_ACT_REPEAT abuse ? [ 534.578973][ C0] TC_ACT_REPEAT abuse ? [ 534.680992][ C0] TC_ACT_REPEAT abuse ? [ 534.806948][T21107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4364'. [ 534.892731][T21107] v,: renamed from veth0_vlan (while UP) [ 534.944192][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4367'. [ 535.621844][T21124] netlink: 'syz.3.4372': attribute type 3 has an invalid length. [ 535.621872][T21124] netlink: 'syz.3.4372': attribute type 1 has an invalid length. [ 535.621887][T21124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4372'. [ 535.841445][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4376'. [ 536.165504][T21145] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4380'. [ 536.198307][T21144] netlink: 'syz.3.4380': attribute type 5 has an invalid length. [ 536.205514][T21145] netlink: 'syz.3.4380': attribute type 5 has an invalid length. [ 536.247026][T21151] netlink: 'syz.4.4382': attribute type 23 has an invalid length. [ 536.373213][T21157] netlink: 'syz.0.4383': attribute type 1 has an invalid length. [ 536.612041][T21155] bond5: option resend_igmp: invalid value (32767) [ 536.612072][T21155] bond5: option resend_igmp: allowed values 0 - 255 [ 536.618606][T21155] bond5 (unregistering): Released all slaves [ 537.535910][T21194] __nla_validate_parse: 4 callbacks suppressed [ 537.535935][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4392'. [ 537.590580][T21195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4391'. [ 537.722128][T17932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.722439][T17932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.753084][ T5623] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.972474][ T5623] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.601047][ T5623] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.776899][ C0] net_ratelimit: 41 callbacks suppressed [ 538.776924][ C0] TC_ACT_REPEAT abuse ? [ 538.879262][ C0] TC_ACT_REPEAT abuse ? [ 538.981665][ C0] TC_ACT_REPEAT abuse ? [ 539.084975][ C0] TC_ACT_REPEAT abuse ? [ 539.186479][ C0] TC_ACT_REPEAT abuse ? [ 539.288877][ C0] TC_ACT_REPEAT abuse ? [ 539.391237][ C0] TC_ACT_REPEAT abuse ? [ 539.493648][ C0] TC_ACT_REPEAT abuse ? [ 539.596063][ C0] TC_ACT_REPEAT abuse ? [ 539.698491][ C0] TC_ACT_REPEAT abuse ? [ 540.413604][T21220] netlink: 'syz.1.4397': attribute type 11 has an invalid length. [ 540.413633][T21220] netlink: 3800 bytes leftover after parsing attributes in process `syz.1.4397'. [ 540.857552][T21241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4403'. [ 540.986738][T21243] tipc: New replicast peer: 172.20.20.187 [ 540.988603][T21243] tipc: Enabled bearer , priority 10 [ 541.115475][T21254] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4406'. [ 541.400007][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.428065][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 541.612520][T21260] bond6: option xmit_hash_policy: invalid value (64) [ 541.650399][T21260] bond6 (unregistering): Released all slaves [ 542.117335][ T5623] tipc: Node number set to 3584897834 [ 542.516633][T21288] sctp: [Deprecated]: syz.2.4415 (pid 21288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.516633][T21288] Use struct sctp_sack_info instead [ 542.695806][T21295] sock: sock_timestamping_bind_phc: sock not bind to device [ 543.287502][T21321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4424'. [ 543.795492][ C0] net_ratelimit: 42 callbacks suppressed [ 543.795515][ C0] TC_ACT_REPEAT abuse ? [ 543.836854][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4429'. [ 543.874657][T21328] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4426'. [ 543.896795][ C0] TC_ACT_REPEAT abuse ? [ 544.000046][ C0] TC_ACT_REPEAT abuse ? [ 544.101536][ C0] TC_ACT_REPEAT abuse ? [ 544.203984][ C0] TC_ACT_REPEAT abuse ? [ 544.306399][ C0] TC_ACT_REPEAT abuse ? [ 544.408784][ C0] TC_ACT_REPEAT abuse ? [ 544.511242][ C0] TC_ACT_REPEAT abuse ? [ 544.613615][ C0] TC_ACT_REPEAT abuse ? [ 544.716762][ C0] TC_ACT_REPEAT abuse ? [ 545.479629][T21387] netlink: 'syz.2.4440': attribute type 13 has an invalid length. [ 545.838051][T21407] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 546.142342][T21419] sctp: [Deprecated]: syz.2.4449 (pid 21419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.142342][T21419] Use struct sctp_sack_info instead [ 546.539168][T21428] netlink: 'syz.3.4451': attribute type 1 has an invalid length. [ 546.618470][T21436] bond0: option ad_select: unable to set because the bond device is up [ 546.636147][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 546.953336][T21444] netlink: 'syz.4.4456': attribute type 10 has an invalid length. [ 547.047279][T21444] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.062992][T21444] bond0: (slave team0): Enslaving as an active interface with an up link [ 547.562727][T21463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4463'. [ 547.653298][T21473] netlink: 'syz.1.4466': attribute type 2 has an invalid length. [ 547.653325][T21473] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4466'. [ 548.048926][T21485] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 548.126782][T21485] bond6 (unregistering): Released all slaves [ 548.149082][T21496] Bluetooth: MGMT ver 1.23 [ 548.392366][T21485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4467'. [ 548.811943][ C0] net_ratelimit: 41 callbacks suppressed [ 548.811968][ C0] TC_ACT_REPEAT abuse ? [ 548.837012][T21520] netlink: 'syz.0.4473': attribute type 1 has an invalid length. [ 548.914371][ C0] TC_ACT_REPEAT abuse ? [ 548.920065][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.005287][T21520] bond6: entered promiscuous mode [ 549.014699][T21520] bond6: entered allmulticast mode [ 549.015167][T21520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.016779][ C0] TC_ACT_REPEAT abuse ? [ 549.087790][T21522] erspan1: entered allmulticast mode [ 549.109376][T21522] bond6: (slave erspan1): making interface the new active one [ 549.109405][T21522] erspan1: entered promiscuous mode [ 549.119148][ C0] TC_ACT_REPEAT abuse ? [ 549.148907][T21522] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 549.221616][ C0] TC_ACT_REPEAT abuse ? [ 549.324000][ C0] TC_ACT_REPEAT abuse ? [ 549.426336][ C0] TC_ACT_REPEAT abuse ? [ 549.529628][ C0] TC_ACT_REPEAT abuse ? [ 549.582160][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4464'. [ 549.582189][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4464'. [ 549.582203][T21481] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 549.631282][ C0] TC_ACT_REPEAT abuse ? [ 549.668905][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4478'. [ 549.668946][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4478'. [ 549.729376][T21541] netlink: 'syz.1.4480': attribute type 1 has an invalid length. [ 549.734816][ C0] TC_ACT_REPEAT abuse ? [ 550.043419][T21541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 550.141140][T21545] bond9: (slave veth0_to_bond): Releasing active interface [ 550.197820][T21545] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 550.277501][T21548] macvlan2: entered promiscuous mode [ 550.277527][T21548] macvlan2: entered allmulticast mode [ 550.292460][T21548] bond10: entered promiscuous mode [ 550.293187][T21548] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 550.311376][T21548] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 550.336382][T21548] bond10: left promiscuous mode [ 550.790727][T21557] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4483'. [ 551.178129][T21567] netlink: 'syz.4.4487': attribute type 49 has an invalid length. [ 551.289247][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 551.430720][T21571] netlink: 'syz.1.4488': attribute type 25 has an invalid length. [ 551.522169][T21580] ieee802154 phy1 wpan1: encryption failed: -22 [ 551.526322][T21580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4490'. [ 551.575873][T21567] ip6gretap0: entered promiscuous mode [ 551.575901][T21567] ip6gretap0: entered allmulticast mode [ 551.834839][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 552.309244][T21603] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 552.539450][T21603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.585770][T21607] bond4: (slave veth0_to_bond): Releasing active interface [ 552.627053][T21607] bond5: (slave veth0_to_bond): making interface the new active one [ 552.628841][T21607] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 552.673177][T21609] macvlan2: entered promiscuous mode [ 552.673200][T21609] macvlan2: entered allmulticast mode [ 552.673842][T21609] bond5: entered promiscuous mode [ 552.673879][T21609] veth0_to_bond: entered promiscuous mode [ 552.674808][T21609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 552.675565][T21609] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 552.675705][T21609] bond5: left promiscuous mode [ 552.675722][T21609] veth0_to_bond: left promiscuous mode [ 552.939660][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4499'. [ 553.716771][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 553.829829][ C0] net_ratelimit: 40 callbacks suppressed [ 553.829854][ C0] TC_ACT_REPEAT abuse ? [ 553.859268][T21640] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4502'. [ 553.877330][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e63f000: rx timeout, send abort [ 553.933050][ C0] TC_ACT_REPEAT abuse ? [ 553.987930][T21640] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4502'. [ 554.035051][ C0] TC_ACT_REPEAT abuse ? [ 554.136750][ C0] TC_ACT_REPEAT abuse ? [ 554.240977][ C0] TC_ACT_REPEAT abuse ? [ 554.341456][ C0] TC_ACT_REPEAT abuse ? [ 554.444095][ C0] TC_ACT_REPEAT abuse ? [ 554.539775][T21665] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4505'. [ 554.546308][ C0] TC_ACT_REPEAT abuse ? [ 554.648711][ C0] TC_ACT_REPEAT abuse ? [ 554.742308][T21679] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 554.752648][ C0] TC_ACT_REPEAT abuse ? [ 554.858832][T21679] 8021q: adding VLAN 0 to HW filter on device bond11 [ 554.949144][T21679] macvlan2: entered promiscuous mode [ 554.949169][T21679] macvlan2: entered allmulticast mode [ 554.965252][T21679] bond11: entered promiscuous mode [ 554.966090][T21679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 554.993554][T21679] bond11: left promiscuous mode [ 555.035717][T21681] bond10: (slave veth0_to_bond): Releasing active interface [ 555.089375][T21681] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 555.204708][T21694] netlink: 'syz.0.4514': attribute type 11 has an invalid length. [ 555.204733][T21694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4514'. [ 555.206780][T21694] netlink: 'syz.0.4514': attribute type 1 has an invalid length. [ 555.206804][T21694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4514'. [ 555.371030][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4512'. [ 555.418904][T21684] syzkaller0: create flow: hash 780632833 index 0 [ 556.173223][T21683] syzkaller0 (unregistered): delete flow: hash 780632833 index 0 [ 556.597782][T21737] veth11: entered promiscuous mode [ 556.597812][T21737] veth11: entered allmulticast mode [ 556.633952][T21743] netlink: 'syz.1.4526': attribute type 1 has an invalid length. [ 556.698125][T21743] 8021q: adding VLAN 0 to HW filter on device bond12 [ 556.758888][T21747] bond11: (slave veth0_to_bond): Releasing active interface [ 556.832785][T21747] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 556.924295][T21743] macvlan2: entered promiscuous mode [ 556.924322][T21743] macvlan2: entered allmulticast mode [ 556.927335][T21743] bond12: entered promiscuous mode [ 556.928763][T21743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 556.965372][T21743] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 556.965749][T21743] bond12: left promiscuous mode [ 557.025884][T21750] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4527'. [ 557.897970][T21767] tc action pedit offset must be on 32 bit boundaries [ 557.945308][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 558.067269][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 558.658274][T21791] netlink: 'syz.0.4541': attribute type 22 has an invalid length. [ 558.687652][T21791] netlink: 'syz.0.4541': attribute type 22 has an invalid length. [ 558.699969][ T3378] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.700019][ T3378] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.700066][ T3378] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.700102][ T3378] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.847251][ C0] net_ratelimit: 40 callbacks suppressed [ 558.847277][ C0] TC_ACT_REPEAT abuse ? [ 558.950926][ C0] TC_ACT_REPEAT abuse ? [ 559.052866][ C0] TC_ACT_REPEAT abuse ? [ 559.154291][ C0] TC_ACT_REPEAT abuse ? [ 559.258541][ C0] TC_ACT_REPEAT abuse ? [ 559.359310][ C0] TC_ACT_REPEAT abuse ? [ 559.462841][ C0] TC_ACT_REPEAT abuse ? [ 559.566248][ C0] TC_ACT_REPEAT abuse ? [ 559.666875][ C0] TC_ACT_REPEAT abuse ? [ 559.769415][ C0] TC_ACT_REPEAT abuse ? [ 559.945426][T21813] syzkaller1: entered promiscuous mode [ 559.945472][T21813] syzkaller1: entered allmulticast mode [ 559.975731][T21815] __nla_validate_parse: 5 callbacks suppressed [ 559.975765][T21815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4546'. [ 560.196152][T21822] nbd3: detected capacity change from 0 to 63 [ 560.649615][ T52] block nbd3: Receive control failed (result -104) [ 561.344317][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'. [ 561.360853][T21849] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4554'. [ 561.388678][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4555'. [ 561.511652][T21855] veth1_macvtap: left promiscuous mode [ 561.684841][T21793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 561.684867][T21793] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 562.451032][T21793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.451058][T21793] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 562.525869][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 562.552531][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 562.587074][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 562.614988][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 562.647343][T21886] netlink: 'syz.2.4565': attribute type 1 has an invalid length. [ 562.658252][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 562.866452][T21897] netlink: 'syz.2.4565': attribute type 1 has an invalid length. [ 563.006124][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.006578][ T1314] ieee802154 phy2 wpan0: encryption failed: -22 [ 563.018260][T21903] xt_hashlimit: size too large, truncated to 1048576 [ 563.047147][T21793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 563.047200][T21793] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 563.063831][T21893] netlink: 'syz.2.4565': attribute type 1 has an invalid length. [ 563.114637][T21906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4567'. [ 563.366672][T21897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.478238][T21900] bond4: (slave veth0_to_bond): Releasing active interface [ 563.539528][T21900] bond5: (slave veth0_to_bond): making interface the new active one [ 563.583842][T21900] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 563.646991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.865257][ C0] net_ratelimit: 39 callbacks suppressed [ 563.865284][ C0] TC_ACT_REPEAT abuse ? [ 563.966951][ C0] TC_ACT_REPEAT abuse ? [ 564.069822][ C0] TC_ACT_REPEAT abuse ? [ 564.172246][ C0] TC_ACT_REPEAT abuse ? [ 564.224064][T21793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 564.224091][T21793] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 564.276279][ C0] TC_ACT_REPEAT abuse ? [ 564.376321][ C0] TC_ACT_REPEAT abuse ? [ 564.478743][ C0] TC_ACT_REPEAT abuse ? [ 564.581129][ C0] TC_ACT_REPEAT abuse ? [ 564.671521][T21793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.671548][T21793] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 564.694555][ C0] TC_ACT_REPEAT abuse ? [ 564.785982][ C0] TC_ACT_REPEAT abuse ? [ 565.322769][T21956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4574'. [ 565.914099][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4578'. [ 565.914137][T21969] block nbd4: Unsupported socket: should be TCP or UNIX. [ 566.782127][T21997] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4585'. [ 567.738483][T22048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4599'. [ 568.142398][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4603'. [ 568.304201][T22062] ip6t_srh: unknown srh match flags 4000 [ 568.660641][ T5282] veth1_macvtap: entered promiscuous mode [ 570.163769][T22123] netlink: 'syz.1.4620': attribute type 10 has an invalid length. [ 570.163985][T22123] v,: entered allmulticast mode [ 570.164990][T22123] v,: left promiscuous mode [ 570.178950][T22123] team0: Device v, failed to register rx_handler [ 570.314826][T22128] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4622'. [ 570.728744][T22143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4626'. [ 570.746798][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746798][T22142] Use struct sctp_assoc_value instead [ 570.746836][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746836][T22142] Use struct sctp_assoc_value instead [ 570.746863][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746863][T22142] Use struct sctp_assoc_value instead [ 570.746889][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746889][T22142] Use struct sctp_assoc_value instead [ 570.746916][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746916][T22142] Use struct sctp_assoc_value instead [ 570.746942][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746942][T22142] Use struct sctp_assoc_value instead [ 570.746968][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746968][T22142] Use struct sctp_assoc_value instead [ 570.746995][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.746995][T22142] Use struct sctp_assoc_value instead [ 570.747020][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.747020][T22142] Use struct sctp_assoc_value instead [ 570.747046][T22142] sctp: [Deprecated]: syz.4.4627 (pid 22142) Use of int in max_burst socket option. [ 570.747046][T22142] Use struct sctp_assoc_value instead [ 571.443053][T22151] bond5: (slave veth0_to_bond): Releasing active interface [ 571.582802][T22151] bond0: (slave bond_slave_0): Releasing backup interface [ 571.638393][T22151] bond0: (slave bond_slave_1): Releasing backup interface [ 571.701643][T22151] team0: Port device team_slave_0 removed [ 571.740992][T22151] team0: Port device team_slave_1 removed [ 571.749609][T22151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.749638][T22151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.774583][T22151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.774609][T22151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.802585][T22151] net_ratelimit: 3 callbacks suppressed [ 571.802606][T22151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.925388][T22169] netlink: 'syz.4.4633': attribute type 21 has an invalid length. [ 571.965826][T22156] team0: Port device xfrm0 added [ 571.965932][T22158] tipc: Started in network mode [ 571.965962][T22158] tipc: Node identity 7ab6a415c727, cluster identity 4711 [ 571.966289][T22158] tipc: Enabled bearer , priority 0 [ 572.085939][T22157] veth1_to_team: mtu less than device minimum [ 572.122958][T22169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4633'. [ 572.623918][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4639'. [ 573.167699][ T25] tipc: Node number set to 3180438549 [ 573.445681][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4641'. [ 574.696098][T22248] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 574.885338][T22256] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 574.908804][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4656'. [ 575.191858][T22253] bond6: (slave bridge0): making interface the new active one [ 575.207598][T22253] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 575.436401][T22257] bond6: (slave bridge3): Enslaving as an active interface with a down link [ 575.532824][T22243] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:d82e:b2ff:fe6b:4669 error=-28 [ 575.821885][T22272] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4658'. [ 576.147225][T22284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4663'. [ 576.147253][T22284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4663'. [ 576.300675][T22243] infiniband syz1: set active [ 576.300819][T22243] infiniband syz1: added team_slave_0 [ 576.303731][T22243] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 576.327312][T22243] infiniband syz1: Couldn't open port 1 [ 576.327570][T22243] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 576.327607][T22243] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 576.327653][T22243] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 576.421268][T22243] RDS/IB: syz1: added [ 576.421329][T22243] smc: adding ib device syz1 with port count 1 [ 576.421353][T22243] smc: ib device syz1 port 1 has no pnetid [ 576.614617][T22293] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4668'. [ 576.727947][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 576.730960][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 576.730988][T22297] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4667'. [ 576.817382][T22293] vlan2: entered allmulticast mode [ 576.817408][T22293] ip6gretap0: entered allmulticast mode [ 577.027662][T22296] syzkaller0: entered promiscuous mode [ 577.027888][T22296] syzkaller0: entered allmulticast mode [ 577.276525][T22315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4669'. [ 577.533504][T22315] x_tables: duplicate underflow at hook 3 [ 577.806733][T22326] netlink: 'syz.3.4671': attribute type 3 has an invalid length. [ 577.806757][T22326] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4671'. [ 578.187835][T22336] syzkaller1: entered promiscuous mode [ 578.187860][T22336] syzkaller1: entered allmulticast mode [ 580.203936][T22401] netlink: NAT attribute has 4 unknown bytes [ 580.203977][T22401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.317621][T22400] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 580.356962][T22400] bond6 (unregistering): Released all slaves [ 581.671944][T22442] syzkaller0: entered promiscuous mode [ 581.672154][T22442] syzkaller0: entered allmulticast mode [ 581.891061][T22448] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4698'. [ 581.923908][T22448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.239373][T22453] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4699'. [ 582.317817][T22453] gretap0: entered promiscuous mode [ 583.119484][T22472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4703'. [ 583.479959][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 585.199075][T22510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4711'. [ 586.412159][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4714'. [ 586.541075][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4717'. [ 586.635167][T22537] netlink: 'syz.0.4719': attribute type 2 has an invalid length. [ 586.750805][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.752731][T22542] syz_tun: entered allmulticast mode [ 586.840677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.842934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.891585][T22542] dvmrp8: entered allmulticast mode [ 586.894767][T22540] syz_tun: left allmulticast mode [ 586.896409][T22549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4719'. [ 587.467463][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4725'. [ 587.647668][T22576] netlink: 'syz.1.4728': attribute type 1 has an invalid length. [ 587.647693][T22576] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4728'. [ 587.800628][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.808591][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4730'. [ 587.880277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.881740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.885304][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.885523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.961351][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.103541][T22595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4732'. [ 588.132240][T22583] bond6: option xmit_hash_policy: invalid value (64) [ 588.138869][T22583] bond6 (unregistering): Released all slaves [ 588.647143][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4738'. [ 588.647168][T22613] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4738'. [ 588.847832][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.150501][T22626] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 589.185428][T22634] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 589.677767][T22658] netlink: 'syz.3.4749': attribute type 1 has an invalid length. [ 589.768467][T22658] bond6: entered promiscuous mode [ 589.768535][T22658] bond6: entered allmulticast mode [ 589.768869][T22658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.839381][T22659] erspan1: entered allmulticast mode [ 589.839635][T22660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4748'. [ 589.839659][T22660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4748'. [ 589.846337][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4750'. [ 589.846392][T22664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4750'. [ 590.341848][T22679] Bluetooth: hci1: too big key_count value 32778 [ 590.615424][ T1735] block nbd3: Possible stuck request ffff888026b57000: control (read@0,1024B). Runtime 30 seconds [ 590.618177][ T1735] block nbd3: Possible stuck request ffff888026b571c0: control (read@1024,3072B). Runtime 30 seconds [ 591.865047][T22727] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 591.882150][T22724] Cannot find set identified by id 0 to match [ 592.040140][ C1] net_ratelimit: 11 callbacks suppressed [ 592.040164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.040593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.291974][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.440000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 592.462328][T22743] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 592.857282][T22757] netlink: 'syz.2.4779': attribute type 16 has an invalid length. [ 592.857308][T22757] __nla_validate_parse: 5 callbacks suppressed [ 592.857320][T22757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4779'. [ 593.080343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.081863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.299160][T22770] ip_tables: iptables: counters copy to user failed while replacing table [ 593.323890][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.727138][T17935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.727385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.962156][T22786] netlink: 'syz.2.4788': attribute type 6 has an invalid length. [ 594.121715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.792284][T22842] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4799'. [ 596.169765][T22855] netlink: 'syz.0.4802': attribute type 2 has an invalid length. [ 596.663007][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 596.720650][T22879] xt_cgroup: path and classid specified [ 597.135117][T22894] netlink: 'syz.4.4810': attribute type 1 has an invalid length. [ 597.135148][T22894] netlink: 'syz.4.4810': attribute type 1 has an invalid length. [ 597.141838][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4810'. [ 597.180972][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4810'. [ 597.239966][ C1] net_ratelimit: 12 callbacks suppressed [ 597.239988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.241927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.242458][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 597.242484][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 597.242555][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 597.368896][T22896] bond7: entered promiscuous mode [ 597.392440][T22896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.428329][T22901] ip_tables: iptables: counters copy to user failed while replacing table [ 597.439208][T22901] only policy match revision 0 supported [ 597.439223][T22901] unable to load match [ 597.456555][T22901] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4812'. [ 597.482280][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.036288][T22913] vlan2: entered allmulticast mode [ 598.036312][T22913] bond0: entered allmulticast mode [ 598.036329][T22913] bond_slave_0: entered allmulticast mode [ 598.036709][T22913] bond_slave_1: entered allmulticast mode [ 598.280059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.281132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.362496][T22924] xt_ecn: cannot match TCP bits for non-tcp packets [ 598.365246][T22930] syz_tun: entered allmulticast mode [ 598.461468][T22929] syz_tun: left allmulticast mode [ 598.569635][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.899318][T22949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4825'. [ 598.938340][T22949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4825'. [ 599.319845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.320543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.482354][T17930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.549302][T22962] netlink: 768 bytes leftover after parsing attributes in process `syz.2.4827'. [ 601.309990][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4839'. [ 601.320703][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 601.707650][T23009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4843'. [ 601.827953][T23014] xt_TCPMSS: Only works on TCP SYN packets [ 601.847378][T23017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4843'. [ 601.868266][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4844'. [ 601.952895][T23016] syzkaller0: entered promiscuous mode [ 601.952922][T23016] syzkaller0: entered allmulticast mode [ 602.075458][T23025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4846'. [ 602.439867][ C1] net_ratelimit: 11 callbacks suppressed [ 602.439891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.441461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.680887][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.855998][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.981893][T23046] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4853'. [ 603.081088][T23049] sctp: [Deprecated]: syz.0.4855 (pid 23049) Use of int in maxseg socket option. [ 603.081088][T23049] Use struct sctp_assoc_value instead [ 603.353755][T23059] xt_LOG: prefix is not null-terminated [ 603.479838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.480236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.938227][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.532649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.533815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.606284][T15054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.464210][T23051] vlan3: entered promiscuous mode [ 607.464236][T23051] hsr0: entered promiscuous mode [ 607.464566][T23051] vlan3: entered allmulticast mode [ 607.464581][T23051] hsr0: entered allmulticast mode [ 607.464595][T23051] hsr_slave_0: entered allmulticast mode [ 607.464765][T23051] hsr_slave_1: entered allmulticast mode [ 607.466700][T23053] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 607.639873][ C1] net_ratelimit: 9 callbacks suppressed [ 607.639902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.640291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.791033][T23082] __nla_validate_parse: 2 callbacks suppressed [ 607.791073][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4864'. [ 607.919056][T23084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4861'. [ 608.127248][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.181018][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 608.181059][T23087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4862'. [ 608.183490][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 608.183534][T23087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4862'. [ 608.679898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.681194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.935593][T23113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4868'. [ 608.935624][T23113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4868'. [ 609.174008][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.269274][T23128] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4873'. [ 609.719913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.721086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.748117][T17930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.748376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.818076][T23144] netlink: 'syz.1.4876': attribute type 20 has an invalid length. [ 609.818103][T23144] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.962483][T23140] xt_hashlimit: size too large, truncated to 1048576 [ 610.715912][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'. [ 612.100598][T23216] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 612.266266][T23218] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 612.266618][T23225] netlink: 'syz.4.4899': attribute type 1 has an invalid length. [ 612.629510][T23241] netlink: 'syz.2.4906': attribute type 3 has an invalid length. [ 612.839874][ C1] net_ratelimit: 9 callbacks suppressed [ 612.839899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.840931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.960857][T23259] netlink: 'syz.0.4910': attribute type 7 has an invalid length. [ 613.009619][T23252] bond8: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 613.038739][T23252] bond8 (unregistering): Released all slaves [ 613.224745][T23264] __nla_validate_parse: 4 callbacks suppressed [ 613.224784][T23264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4911'. [ 613.493812][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.879849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.881347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.200530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.535902][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.667876][T23314] team0: No ports can be present during mode change [ 614.920015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.920629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.987007][T23328] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4928'. [ 615.375611][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4933'. [ 615.481365][T15053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.985643][T23376] sctp: [Deprecated]: syz.3.4937 (pid 23376) Use of int in maxseg socket option. [ 615.985643][T23376] Use struct sctp_assoc_value instead [ 615.987555][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4937'. [ 616.335606][T23379] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4938'. [ 616.407038][T23385] netlink: 'syz.1.4941': attribute type 1 has an invalid length. [ 616.407064][T23385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4941'. [ 616.407081][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 616.754189][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4946'. [ 616.754564][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4946'. [ 616.893452][T23406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4947'. [ 617.375270][T23430] xt_LOG: level 8 >= 8 [ 617.394247][T23427] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 617.701309][T23438] xt_socket: unknown flags 0xc [ 617.822936][T23447] xt_socket: unknown flags 0xc [ 618.040214][ C1] net_ratelimit: 12 callbacks suppressed [ 618.040239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.041156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.344492][T23460] __nla_validate_parse: 1 callbacks suppressed [ 618.344518][T23460] netlink: 304 bytes leftover after parsing attributes in process `syz.2.4963'. [ 618.369464][T23460] netlink: 'syz.2.4963': attribute type 1 has an invalid length. [ 618.687918][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.834428][T23477] syzkaller1: entered promiscuous mode [ 618.834457][T23477] syzkaller1: entered allmulticast mode [ 618.915350][T23480] syzkaller0: entered promiscuous mode [ 618.915379][T23480] syzkaller0: entered allmulticast mode [ 618.975282][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4970'. [ 619.080046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.080800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.249396][T23495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.417047][T23494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.737769][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.943506][T23521] sctp: [Deprecated]: syz.1.4979 (pid 23521) Use of int in max_burst socket option deprecated. [ 619.943506][T23521] Use struct sctp_assoc_value instead [ 620.006038][T23525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.006639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.028872][T23525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.030265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.045076][T23521] bond12: (slave veth0_to_bond): Releasing active interface [ 620.526471][T23532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4982'. [ 620.530785][T23532] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4982'. [ 620.926449][T23540] IPv6: NLM_F_REPLACE set, but no existing node found! [ 621.241420][ T1735] block nbd3: Possible stuck request ffff888026b57000: control (read@0,1024B). Runtime 60 seconds [ 621.241469][ T1735] block nbd3: Possible stuck request ffff888026b571c0: control (read@1024,3072B). Runtime 60 seconds [ 621.730466][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4995'. [ 621.754803][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 621.789293][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 623.004621][T23604] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 623.005049][T23604] gretap3: entered promiscuous mode [ 623.005094][T23604] gretap3: entered allmulticast mode [ 623.239870][ C1] net_ratelimit: 76 callbacks suppressed [ 623.239895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.242128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.802375][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.883563][T23632] netlink: 'syz.0.5011': attribute type 11 has an invalid length. [ 623.883591][T23632] netlink: 'syz.0.5011': attribute type 4 has an invalid length. [ 623.883607][T23632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5011'. [ 623.978383][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.996323][T23634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5011'. [ 623.996350][T23634] nbd: illegal input index 65508 [ 624.279848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.281588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.452614][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.453152][ T1314] ieee802154 phy2 wpan0: encryption failed: -22 [ 624.894396][T23650] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 624.913022][T23659] netlink: 'syz.4.5017': attribute type 39 has an invalid length. [ 625.016441][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.067727][T23657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5019'. [ 625.277204][T23676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5021'. [ 625.319870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.320387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.500561][T23682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5024'. [ 625.562717][T23673] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 626.790297][T23716] pim6reg: entered allmulticast mode [ 626.808015][T23716] pim6reg: left allmulticast mode [ 626.839475][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5035'. [ 627.329334][T23719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5037'. [ 627.429745][T23726] netlink: 'syz.1.5039': attribute type 1 has an invalid length. [ 627.649441][T23745] netlink: 'syz.2.5042': attribute type 1 has an invalid length. [ 627.672998][T23726] 8021q: adding VLAN 0 to HW filter on device bond13 [ 627.674605][T23743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5042'. [ 627.738912][T23733] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 627.816640][T23744] macvlan0: entered promiscuous mode [ 627.816666][T23744] macvlan0: entered allmulticast mode [ 627.832274][T23744] bond13: entered promiscuous mode [ 627.833004][T23744] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 627.840956][T23744] bond13: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 627.852852][T23744] bond13: left promiscuous mode [ 628.061293][T23756] lo: entered promiscuous mode [ 628.278124][T23754] lo: left promiscuous mode [ 628.447369][ C1] net_ratelimit: 14 callbacks suppressed [ 628.447393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.448897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.702475][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5045'. [ 628.743732][T23773] netlink: 'syz.1.5047': attribute type 16 has an invalid length. [ 628.743757][T23773] netlink: 'syz.1.5047': attribute type 3 has an invalid length. [ 628.743781][T23773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5047'. [ 628.780533][T23773] ip6t_REJECT: ECHOREPLY is not supported [ 629.176026][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.321742][T23791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5054'. [ 629.479857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.482098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.953232][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5061'. [ 629.956437][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.023815][T23814] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 630.109040][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5062'. [ 630.109078][T23812] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 630.263680][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.361153][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5061'. [ 630.361939][T23812] geneve3: entered promiscuous mode [ 630.361959][T23812] geneve3: entered allmulticast mode [ 630.364270][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'. [ 630.519837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.589197][T23814] syzkaller1: entered promiscuous mode [ 630.589382][T23814] syzkaller1: entered allmulticast mode [ 630.609046][T23835] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 630.609078][T23835] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 630.772686][T23837] syzkaller0: entered promiscuous mode [ 630.772719][T23837] syzkaller0: entered allmulticast mode [ 631.011009][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5070'. [ 631.359084][T23862] IPVS: length: 73 != 8 [ 632.262813][T23887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5080'. [ 632.472284][T23897] syzkaller1: left promiscuous mode [ 632.472351][T23897] syzkaller1: left allmulticast mode [ 632.790586][T23919] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5090'. [ 633.127686][T23933] netlink: 'syz.4.5093': attribute type 1 has an invalid length. [ 633.386745][T23942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5094'. [ 633.434160][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5095'. [ 633.639926][ C1] net_ratelimit: 16 callbacks suppressed [ 633.639950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.640974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.477753][T23984] netlink: 'syz.4.5106': attribute type 1 has an invalid length. [ 634.507258][T23988] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 634.507289][T23988] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 634.610796][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.683029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.684815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.709235][T23984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.952577][T23989] bond7: (slave veth17): Enslaving as an active interface with a down link [ 635.102379][T23992] team0: Port device dummy0 removed [ 635.183139][T23992] bond7: (slave dummy0): Enslaving as an active interface with a down link [ 635.664413][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.719866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.720675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.969630][T24021] __nla_validate_parse: 3 callbacks suppressed [ 635.969654][T24021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5116'. [ 636.263118][T24032] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 636.298635][T24032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.307385][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'. [ 636.622814][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 636.622843][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 636.660389][T15053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.660618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.731240][T24046] xt_l2tp: unknown flags: 43 [ 636.916541][T24046] netlink: 12700 bytes leftover after parsing attributes in process `syz.1.5126'. [ 636.936670][T24046] hsr_slave_0: left promiscuous mode [ 636.937721][T24046] hsr_slave_1: left promiscuous mode [ 637.758267][T24078] vlan0: entered allmulticast mode [ 637.758301][T24078] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 637.797674][T24087] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5133'. [ 638.359758][T24096] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 638.359783][T24096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5139'. [ 638.505584][T24105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.551806][T24107] netlink: 'syz.4.5141': attribute type 1 has an invalid length. [ 638.615925][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5141'. [ 638.648019][T24107] 8021q: adding VLAN 0 to HW filter on device bond8 [ 638.719140][T17926] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 638.744995][T17926] bond5: now running without any active interface! [ 638.768491][T18316] net_ratelimit: 8 callbacks suppressed [ 638.768513][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.839844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.841113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.015880][T24124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5146'. [ 639.162040][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.613732][T24146] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5151'. [ 639.677845][T24150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.826060][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.879971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.880632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.878845][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.919867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.113568][T24196] bond4: (slave veth0_to_bond): Releasing active interface [ 641.197927][T24196] bond0: (slave bond_slave_0): Releasing backup interface [ 641.222614][T24196] bond_slave_0: left allmulticast mode [ 641.328934][T24196] bond0: (slave bond_slave_1): Releasing backup interface [ 641.343576][T24196] bond_slave_1: left allmulticast mode [ 641.397111][T24202] x_tables: duplicate underflow at hook 3 [ 641.487235][T24196] team0: Port device team_slave_0 removed [ 641.542343][T24196] team0: Port device team_slave_1 removed [ 641.544630][T24196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.544654][T24196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.947724][T24164] bridge0: entered promiscuous mode [ 641.947763][T24164] bridge0: entered allmulticast mode [ 642.101245][T24217] __nla_validate_parse: 2 callbacks suppressed [ 642.101264][T24217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5161'. [ 642.816341][T24259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5166'. [ 642.839188][T24210] bridge1: entered promiscuous mode [ 642.845898][T24210] bridge1: entered allmulticast mode [ 643.896491][T24287] netlink: 'syz.4.5172': attribute type 1 has an invalid length. [ 643.977134][ T990] net_ratelimit: 10 callbacks suppressed [ 643.977157][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.039867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.040986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.615526][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052f14800: rx timeout, send abort [ 644.616312][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888052f14800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 644.792907][T24306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5179'. [ 644.927171][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.940895][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.004819][T24311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5181'. [ 645.008325][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.079927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.080352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.085934][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.119976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.178758][T24341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5188'. [ 648.201494][T24385] netlink: 'syz.0.5197': attribute type 2 has an invalid length. [ 648.717579][T24417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5205'. [ 648.786777][T24417] netlink: 'syz.3.5205': attribute type 3 has an invalid length. [ 648.786806][T24417] netlink: 'syz.3.5205': attribute type 3 has an invalid length. [ 649.136655][T24417] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 649.168249][T24417] bond9 (unregistering): Released all slaves [ 649.239927][ C1] net_ratelimit: 7 callbacks suppressed [ 649.239950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.240420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.341827][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.451162][T24436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5207'. [ 649.559596][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5210'. [ 649.906255][T24443] netlink: NAT attribute has 8 unknown bytes [ 649.906293][T24443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.977889][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.101961][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.103247][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.200090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.200614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.519162][T24485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5222'. [ 650.738147][T24490] syzkaller0: entered promiscuous mode [ 650.738173][T24490] syzkaller0: entered allmulticast mode [ 650.843271][T24492] simple: /dev/video#_3 [ 650.843293][T24492] simple: /dev/video#_6 [ 650.843304][T24492] simple: /dev/video#_9 [ 650.843313][T24492] simple: /dev/video#_12 [ 650.843323][T24492] simple: /dev/video#_15 [ 650.843334][T24492] simple: /dev/video#_18 [ 650.843344][T24492] simple: /dev/video#_21 [ 650.843353][T24492] simple: /dev/video#_24 [ 650.843363][T24492] simple: /dev/video#_27 [ 650.843373][T24492] simple: /dev/video#_30 [ 650.843383][T24492] simple: /dev/video#_33 [ 650.843394][T24492] simple: /dev/video#_36 [ 650.843404][T24492] simple: /dev/video#_39 [ 650.843414][T24492] simple: /dev/video#_42 [ 650.843424][T24492] simple: /dev/video#_45 [ 650.843434][T24492] simple: /dev/video#_48 [ 650.843444][T24492] simple: /dev/video#_51 [ 650.843455][T24492] simple: /dev/video#_54 [ 650.843465][T24492] simple: /dev/video#_57 [ 650.843475][T24492] simple: /dev/video#_60 [ 650.843484][T24492] simple: /dev/video#_63 [ 650.843495][T24492] simple: /dev/video#_66 [ 650.843506][T24492] simple: /dev/video#_69 [ 650.843516][T24492] simple: /dev/video#_72 [ 650.843527][T24492] simple: /dev/video#_75 [ 650.843538][T24492] simple: /dev/video#_78 [ 650.843548][T24492] simple: /dev/video#_81 [ 650.843559][T24492] simple: /dev/video#_84 [ 650.843569][T24492] simple: /dev/video#_87 [ 650.843579][T24492] simple: /dev/video#_90 [ 650.843589][T24492] simple: /dev/video#_93 [ 650.843599][T24492] simple: /dev/video#_96 [ 650.844374][T24490] simple: /dev/video#_99 [ 650.844390][T24490] simple: /dev/video#_102 [ 650.844401][T24490] simple: /dev/video#_105 [ 650.844412][T24490] simple: /dev/video#_108 [ 650.844423][T24490] simple: /dev/video#_111 [ 650.844434][T24490] simple: /dev/video#_114 [ 650.844445][T24490] simple: /dev/video#_117 [ 650.844456][T24490] simple: /dev/video#_120 [ 650.844467][T24490] simple: /dev/video#_123 [ 650.844478][T24490] simple: /dev/video#_126 [ 650.844488][T24490] simple: /dev/video#_129 [ 650.844499][T24490] simple: /dev/video#_132 [ 650.844510][T24490] simple: /dev/video#_135 [ 650.844521][T24490] simple: /dev/video#_138 [ 650.844532][T24490] simple: /dev/video#_141 [ 650.844542][T24490] simple: /dev/video#_144 [ 650.844553][T24490] simple: /dev/video#_147 [ 650.844564][T24490] simple: /dev/video#_150 [ 650.844575][T24490] simple: /dev/video#_153 [ 650.844586][T24490] simple: /dev/video#_156 [ 650.844596][T24490] simple: /dev/video#_159 [ 650.844607][T24490] simple: /dev/video#_162 [ 650.844618][T24490] simple: /dev/video#_165 [ 650.844629][T24490] simple: /dev/video#_168 [ 650.844639][T24490] simple: /dev/video#_171 [ 650.844650][T24490] simple: /dev/video#_174 [ 650.844661][T24490] simple: /dev/video#_177 [ 650.844672][T24490] simple: /dev/video#_180 [ 650.844683][T24490] simple: /dev/video#_183 [ 650.844693][T24490] simple: /dev/video#_186 [ 650.844703][T24490] simple: /dev/video#_189 [ 650.844714][T24490] simple: /dev/video#_192 [ 651.332838][ T1735] block nbd3: Possible stuck request ffff888026b57000: control (read@0,1024B). Runtime 90 seconds [ 651.332889][ T1735] block nbd3: Possible stuck request ffff888026b571c0: control (read@1024,3072B). Runtime 90 seconds [ 651.337694][T24504] block nbd0: reconnected socket [ 651.508781][T15053] bridge_slave_1: left allmulticast mode [ 651.509191][T15053] bridge_slave_1: left promiscuous mode [ 651.510221][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.541104][T15053] bridge_slave_0: left allmulticast mode [ 651.541502][T15053] bridge_slave_0: left promiscuous mode [ 651.548592][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.976701][T24517] netlink: 'syz.1.5233': attribute type 1 has an invalid length. [ 652.284990][T24521] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 652.285016][T24521] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.5234'. [ 652.331137][T15053] bond1 (unregistering): (slave bridge1): Releasing active interface [ 652.485769][T15053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.489066][T15053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.513708][T15053] bond0 (unregistering): Released all slaves [ 652.529083][T15053] bond1 (unregistering): Released all slaves [ 652.556411][T15053] bond2 (unregistering): Released all slaves [ 652.586906][T15053] bond3 (unregistering): Released all slaves [ 652.615219][T15053] bond4 (unregistering): Released all slaves [ 652.646032][T15053] bond5 (unregistering): Released all slaves [ 652.672049][T15053] bond6 (unregistering): Released all slaves [ 652.724131][T15053] bond7 (unregistering): Released all slaves [ 652.748892][T15053] bond8 (unregistering): Released all slaves [ 652.783543][T15053] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 652.786385][T15053] bond9 (unregistering): Released all slaves [ 652.833396][T15053] bond10 (unregistering): Released all slaves [ 652.872632][T15053] bond11 (unregistering): Released all slaves [ 652.900249][T15053] bond12 (unregistering): Released all slaves [ 652.972447][ T52] block nbd0: Receive control failed (result -32) [ 653.073984][T24517] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 653.110230][T24525] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 653.110254][T24525] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.5234'. [ 654.067235][T15053] IPVS: stopping master sync thread 5896 ... [ 654.285101][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5244'. [ 654.439848][ C1] net_ratelimit: 22 callbacks suppressed [ 654.439890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.440346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.620246][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.650708][T24564] sctp: [Deprecated]: syz.4.5247 (pid 24564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.650708][T24564] Use struct sctp_sack_info instead [ 655.167492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.198708][T17926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.338421][T24590] tipc: Enabling of bearer rejected, failed to enable media [ 655.479841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.480280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.642864][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.031682][T24596] wireguard0: entered promiscuous mode [ 656.079077][T24610] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5256'. [ 656.519963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.520841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.692853][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.239026][T24635] netlink: 'syz.0.5264': attribute type 12 has an invalid length. [ 657.557909][T24657] netlink: 'syz.1.5269': attribute type 12 has an invalid length. [ 657.904832][T15053] hsr_slave_0: left promiscuous mode [ 657.907369][T15053] hsr_slave_1: left promiscuous mode [ 657.935202][T15053] veth1_macvtap: left promiscuous mode [ 657.949616][T15053] veth0_macvtap: left promiscuous mode [ 657.953779][T15053] veth1_vlan: left promiscuous mode [ 658.711682][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5281'. [ 658.711712][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5281'. [ 658.774473][T24692] netlink: 'syz.0.5281': attribute type 4 has an invalid length. [ 658.774498][T24692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5281'. [ 659.155634][T15053] team0 (unregistering): Port device team_slave_1 removed [ 659.187294][T15053] team0 (unregistering): Port device team_slave_0 removed [ 659.639959][ C1] net_ratelimit: 9 callbacks suppressed [ 659.639985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.641370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.774633][T24692] .`: renamed from bond0 [ 659.801189][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.804633][T24693] tipc: Enabling of bearer rejected, failed to enable media [ 659.870016][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5284'. [ 659.870043][T24709] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5284'. [ 660.297163][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.327474][T24709] veth3: entered promiscuous mode [ 660.679959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.682134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.791607][T15053] IPVS: stop unused estimator thread 0... [ 660.850601][T24734] netlink: 'syz.4.5288': attribute type 2 has an invalid length. [ 660.850743][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.712741][T24770] IPVS: Unknown mcast interface: vcan0 [ 661.720001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.722443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.829303][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5300'. [ 661.881501][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.391553][T24793] netlink: 'syz.0.5303': attribute type 17 has an invalid length. [ 662.495757][T24793] 8021q: adding VLAN 0 to HW filter on device .` [ 662.576965][T24793] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.577666][T24793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.969248][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5308'. [ 663.164182][T24828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5310'. [ 664.444344][T24856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5314'. [ 664.554690][T24867] netlink: 'syz.2.5318': attribute type 1 has an invalid length. [ 664.647176][T24867] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.774971][T24872] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 664.827527][T24867] macvlan3: entered promiscuous mode [ 664.827555][T24867] macvlan3: entered allmulticast mode [ 664.828408][T24867] bond8: entered promiscuous mode [ 664.829240][T24867] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 664.842777][ C1] net_ratelimit: 10 callbacks suppressed [ 664.842799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.843356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.882965][T24867] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 664.883305][T24867] bond8: left promiscuous mode [ 664.929072][T24886] SET target dimension over the limit! [ 665.001222][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.230841][T24894] veth1_vlan: entered promiscuous mode [ 665.269310][T24894] veth1_vlan: left promiscuous mode [ 665.495423][T15053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.628519][T24900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5324'. [ 665.628560][T24900] netlink: 'syz.0.5324': attribute type 7 has an invalid length. [ 665.628574][T24900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5324'. [ 665.857200][T24912] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5326'. [ 665.879828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.880267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.910737][T24912] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5326'. [ 666.064136][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.065941][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.223445][T24924] netlink: 'syz.2.5332': attribute type 1 has an invalid length. [ 666.228475][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'. [ 666.284681][T24918] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5329'. [ 666.375230][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'. [ 666.376141][T24924] 8021q: adding VLAN 0 to HW filter on device bond9 [ 666.465153][T24940] netlink: 'syz.1.5333': attribute type 1 has an invalid length. [ 666.465180][T24940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5333'. [ 666.491327][T24931] bond8: (slave veth0_to_bond): Releasing active interface [ 666.512926][T24931] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 666.548285][T24933] macvlan3: entered promiscuous mode [ 666.548312][T24933] macvlan3: entered allmulticast mode [ 666.549016][T24933] bond9: entered promiscuous mode [ 666.573254][T24933] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 666.574165][T24933] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 666.574518][T24933] bond9: left promiscuous mode [ 666.919857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.920666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.035318][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5340'. [ 667.051631][T24959] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸Š�Ÿ>úáÂN9Ü5äx×Ùhˉ½p¡�þàn [ 667.202800][T24967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5342'. [ 667.204041][T24967] netlink: 'syz.1.5342': attribute type 64 has an invalid length. [ 668.073061][T24995] netlink: 'syz.2.5349': attribute type 1 has an invalid length. [ 668.307302][T24995] 8021q: adding VLAN 0 to HW filter on device bond10 [ 668.406414][T24997] bond9: (slave veth0_to_bond): Releasing active interface [ 668.455414][T24997] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 668.482914][T24998] macvlan3: entered promiscuous mode [ 668.482941][T24998] macvlan3: entered allmulticast mode [ 668.483692][T24998] bond10: entered promiscuous mode [ 668.484458][T24998] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 668.485268][T24998] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 668.486746][T24998] bond10: left promiscuous mode [ 668.754915][T25006] tap0: tun_chr_ioctl cmd 1074025676 [ 668.754946][T25006] tap0: owner set to 0 [ 668.755019][T25009] tap0: tun_chr_ioctl cmd 35108 [ 668.779466][T25002] tap0: tun_chr_ioctl cmd 2147767517 [ 668.954568][T25019] bond11: invalid ARP target 0.0.0.0 specified for addition [ 668.954600][T25019] bond11: option arp_ip_target: invalid value (0) [ 669.017690][T25019] bond11 (unregistering): Released all slaves [ 670.039825][ C1] net_ratelimit: 9 callbacks suppressed [ 670.039849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.041295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.212759][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.520472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.592302][T25091] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 670.975894][T25095] __nla_validate_parse: 7 callbacks suppressed [ 670.975920][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'. [ 671.080053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.081280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.183549][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.247524][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.106089][T25129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5376'. [ 672.107795][T25129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5376'. [ 672.128152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.138338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.330509][T25135] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5377'. [ 672.887225][T25162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5385'. [ 672.887257][T25162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5385'. [ 672.887275][T25162] netlink: 'syz.1.5385': attribute type 6 has an invalid length. [ 672.887290][T25162] netlink: 'syz.1.5385': attribute type 5 has an invalid length. [ 672.887305][T25162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5385'. [ 674.192882][T25206] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5398'. [ 674.738683][T25219] netlink: 'syz.3.5403': attribute type 4 has an invalid length. [ 674.759121][T25220] netlink: 'syz.3.5403': attribute type 4 has an invalid length. [ 675.070916][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 675.414319][ T990] net_ratelimit: 15 callbacks suppressed [ 675.414343][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.558512][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 675.593571][T25229] syzkaller0: entered promiscuous mode [ 675.593627][T25229] syzkaller0: entered allmulticast mode [ 675.799958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.041062][T25258] __nla_validate_parse: 22 callbacks suppressed [ 676.041088][T25258] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5412'. [ 676.095648][T25260] netlink: 'syz.0.5413': attribute type 27 has an invalid length. [ 676.457733][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.945479][ T1273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.499033][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.532917][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.151950][ T4987] udevd[4987]: worker [18087] /devices/virtual/block/nbd3 is taking a long time [ 679.584713][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.674025][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.674288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.146933][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.592771][T25272] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5418'. [ 680.601413][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.644056][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5416'. [ 680.805302][T25278] netlink: 'syz.3.5419': attribute type 10 has an invalid length. [ 680.916971][T25278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.943162][T25278] batadv0: entered allmulticast mode [ 680.944103][T25278] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 680.966644][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5415'. [ 680.966735][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5415'. [ 680.995553][T25269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5415'. [ 681.113983][T25279] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 681.115141][T25279] batadv0: left allmulticast mode [ 681.133673][T25279] bond0 (unregistering): Released all slaves [ 681.404452][ T1735] block nbd3: Possible stuck request ffff888026b57000: control (read@0,1024B). Runtime 120 seconds [ 681.407603][ T1735] block nbd3: Possible stuck request ffff888026b571c0: control (read@1024,3072B). Runtime 120 seconds [ 681.560129][T25289] ip_tables: iptables: counters copy to user failed while replacing table [ 681.627876][T25292] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5424'. [ 681.650468][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.710030][T25292] netlink: 'syz.2.5424': attribute type 3 has an invalid length. [ 681.783095][T25300] netlink: 'syz.0.5426': attribute type 1 has an invalid length. [ 681.783121][T25300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5426'. [ 681.908466][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5417'. [ 681.972957][T25305] xt_esp: unknown flags DD [ 682.442721][T25311] tipc: Enabled bearer , priority 0 [ 682.513615][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5431'. [ 682.542866][T25311] syzkaller0: MTU too low for tipc bearer [ 682.542893][T25311] tipc: Disabling bearer [ 682.563396][T25315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5429'. [ 682.659870][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5432'. [ 682.659902][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5432'. [ 682.688494][T17926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.689154][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.477706][T25332] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5437'. [ 683.721288][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.753926][T25337] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5440'. [ 684.063380][T25341] syzkaller0: entered promiscuous mode [ 684.063409][T25341] syzkaller0: entered allmulticast mode [ 684.761143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.243823][T17936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.244103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.356027][T25361] [ 685.358437][T25361] ====================================================== [ 685.365535][T25361] WARNING: possible circular locking dependency detected [ 685.372697][T25361] syzkaller #0 Not tainted [ 685.377139][T25361] ------------------------------------------------------ [ 685.384232][T25361] syz.2.5446/25361 is trying to acquire lock: [ 685.390366][T25361] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 685.401061][T25361] [ 685.401061][T25361] but task is already holding lock: [ 685.408541][T25361] ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 685.418737][T25361] [ 685.418737][T25361] which lock already depends on the new lock. [ 685.418737][T25361] [ 685.429291][T25361] [ 685.429291][T25361] the existing dependency chain (in reverse order) is: [ 685.438333][T25361] [ 685.438333][T25361] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 685.446200][T25361] cpus_read_lock+0x42/0x160 [ 685.451383][T25361] static_key_slow_inc+0x12/0x30 [ 685.456887][T25361] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 685.463274][T25361] nbd_genl_foreach_sock+0x265/0x450 [ 685.469114][T25361] nbd_genl_reconfigure+0xbbb/0x1040 [ 685.475005][T25361] genl_family_rcv_msg_doit+0x233/0x340 [ 685.481236][T25361] genl_rcv_msg+0x614/0x7a0 [ 685.486296][T25361] netlink_rcv_skb+0x226/0x4a0 [ 685.491665][T25361] genl_rcv+0x28/0x40 [ 685.496205][T25361] netlink_unicast+0x7bd/0x940 [ 685.501541][T25361] netlink_sendmsg+0x813/0xb40 [ 685.506888][T25361] sock_sendmsg_nosec+0x13a/0x180 [ 685.512468][T25361] ____sys_sendmsg+0x54e/0x850 [ 685.517795][T25361] ___sys_sendmsg+0x2a5/0x360 [ 685.523024][T25361] __x64_sys_sendmsg+0x1b1/0x290 [ 685.528517][T25361] do_syscall_64+0x166/0x520 [ 685.533663][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.540109][T25361] [ 685.540109][T25361] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 685.547798][T25361] __mutex_lock+0x19d/0x1550 [ 685.552949][T25361] nbd_queue_rq+0x373/0xff0 [ 685.558003][T25361] blk_mq_dispatch_rq_list+0x499/0x1990 [ 685.564213][T25361] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 685.571209][T25361] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 685.577749][T25361] blk_mq_run_work_fn+0x16c/0x300 [ 685.583330][T25361] process_scheduled_works+0xc3d/0x1630 [ 685.589458][T25361] worker_thread+0xa47/0xfb0 [ 685.594601][T25361] kthread+0x38b/0x480 [ 685.599223][T25361] ret_from_fork+0x514/0xb70 [ 685.604388][T25361] ret_from_fork_asm+0x1a/0x30 [ 685.609715][T25361] [ 685.609715][T25361] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 685.616974][T25361] __mutex_lock+0x19d/0x1550 [ 685.622149][T25361] nbd_queue_rq+0xc1/0xff0 [ 685.627134][T25361] blk_mq_dispatch_rq_list+0x499/0x1990 [ 685.633266][T25361] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 685.640156][T25361] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 685.646793][T25361] blk_mq_run_work_fn+0x16c/0x300 [ 685.652394][T25361] process_scheduled_works+0xc3d/0x1630 [ 685.658515][T25361] worker_thread+0xa47/0xfb0 [ 685.663678][T25361] kthread+0x38b/0x480 [ 685.668302][T25361] ret_from_fork+0x514/0xb70 [ 685.673443][T25361] ret_from_fork_asm+0x1a/0x30 [ 685.678777][T25361] [ 685.678777][T25361] -> #4 (set->srcu){.+.+}-{0:0}: [ 685.685942][T25361] __synchronize_srcu+0xc9/0x2f0 [ 685.691485][T25361] elevator_switch+0x1e8/0x7b0 [ 685.696934][T25361] elevator_change+0x2fa/0x480 [ 685.702247][T25361] elevator_set_default+0x375/0x440 [ 685.708013][T25361] blk_register_queue+0x3f3/0x4e0 [ 685.713698][T25361] __add_disk+0x6b8/0xdb0 [ 685.718589][T25361] add_disk_fwnode+0x100/0x3a0 [ 685.723912][T25361] nbd_dev_add+0x733/0xb60 [ 685.728883][T25361] nbd_init+0x168/0x1f0 [ 685.733816][T25361] do_one_initcall+0x250/0x870 [ 685.739165][T25361] do_initcall_level+0x10a/0x1a0 [ 685.744705][T25361] do_initcalls+0x59/0xa0 [ 685.749587][T25361] kernel_init_freeable+0x29d/0x3e0 [ 685.755335][T25361] kernel_init+0x22/0x1d0 [ 685.760226][T25361] ret_from_fork+0x514/0xb70 [ 685.765366][T25361] ret_from_fork_asm+0x1a/0x30 [ 685.770694][T25361] [ 685.770694][T25361] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 685.778553][T25361] __mutex_lock+0x19d/0x1550 [ 685.783714][T25361] elevator_change+0x1af/0x480 [ 685.789031][T25361] elevator_set_none+0xb5/0x140 [ 685.794433][T25361] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 685.800799][T25361] nbd_start_device+0x189/0xb30 [ 685.806204][T25361] nbd_genl_connect+0x167d/0x1cd0 [ 685.811775][T25361] genl_family_rcv_msg_doit+0x233/0x340 [ 685.817887][T25361] genl_rcv_msg+0x614/0x7a0 [ 685.822946][T25361] netlink_rcv_skb+0x226/0x4a0 [ 685.828267][T25361] genl_rcv+0x28/0x40 [ 685.832799][T25361] netlink_unicast+0x7bd/0x940 [ 685.838154][T25361] netlink_sendmsg+0x813/0xb40 [ 685.843483][T25361] sock_sendmsg_nosec+0x13a/0x180 [ 685.849059][T25361] ____sys_sendmsg+0x54e/0x850 [ 685.854382][T25361] ___sys_sendmsg+0x2a5/0x360 [ 685.859611][T25361] __x64_sys_sendmsg+0x1b1/0x290 [ 685.865111][T25361] do_syscall_64+0x166/0x520 [ 685.870264][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.876715][T25361] [ 685.876715][T25361] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 685.885412][T25361] blk_alloc_queue+0x544/0x690 [ 685.890731][T25361] __blk_mq_alloc_disk+0x194/0x390 [ 685.896398][T25361] nbd_dev_add+0x494/0xb60 [ 685.901366][T25361] nbd_genl_connect+0x96c/0x1cd0 [ 685.906854][T25361] genl_family_rcv_msg_doit+0x233/0x340 [ 685.912957][T25361] genl_rcv_msg+0x614/0x7a0 [ 685.918028][T25361] netlink_rcv_skb+0x226/0x4a0 [ 685.923415][T25361] genl_rcv+0x28/0x40 [ 685.927951][T25361] netlink_unicast+0x7bd/0x940 [ 685.933287][T25361] netlink_sendmsg+0x813/0xb40 [ 685.938610][T25361] sock_sendmsg_nosec+0x13a/0x180 [ 685.944181][T25361] ____sys_sendmsg+0x54e/0x850 [ 685.949504][T25361] ___sys_sendmsg+0x2a5/0x360 [ 685.954734][T25361] __x64_sys_sendmsg+0x1b1/0x290 [ 685.960234][T25361] do_syscall_64+0x166/0x520 [ 685.965377][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.971826][T25361] [ 685.971826][T25361] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 685.979086][T25361] fs_reclaim_acquire+0x71/0x100 [ 685.984582][T25361] kmem_cache_alloc_noprof+0x5f/0x600 [ 685.990521][T25361] __kernfs_iattrs+0xdd/0x380 [ 685.995754][T25361] kernfs_iop_setattr+0xe6/0x3f0 [ 686.001244][T25361] notify_change+0xbba/0xea0 [ 686.006425][T25361] do_truncate+0x1c2/0x250 [ 686.011493][T25361] path_openat+0x15b5/0x1d60 [ 686.016636][T25361] do_file_open+0x23e/0x4a0 [ 686.021690][T25361] do_sys_openat2+0x115/0x200 [ 686.026922][T25361] __x64_sys_openat+0x138/0x170 [ 686.032325][T25361] do_syscall_64+0x166/0x520 [ 686.037478][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.043979][T25361] [ 686.043979][T25361] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 686.052625][T25361] __lock_acquire+0x164c/0x2de0 [ 686.058045][T25361] lock_acquire+0x115/0x350 [ 686.063119][T25361] down_read+0x4a/0x330 [ 686.067916][T25361] kernfs_iop_permission+0x7f/0x430 [ 686.073675][T25361] inode_permission+0x3de/0x5f0 [ 686.079098][T25361] cgroup_attach_permissions+0x28e/0x9f0 [ 686.085288][T25361] __cgroup_procs_write+0x24b/0x320 [ 686.091042][T25361] cgroup_threads_write+0x24/0x50 [ 686.096635][T25361] cgroup_file_write+0x331/0x8f0 [ 686.102135][T25361] kernfs_fop_write_iter+0x3a4/0x540 [ 686.107974][T25361] vfs_write+0x612/0xba0 [ 686.112779][T25361] ksys_write+0x150/0x270 [ 686.117703][T25361] do_syscall_64+0x166/0x520 [ 686.122857][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.129327][T25361] [ 686.129327][T25361] other info that might help us debug this: [ 686.129327][T25361] [ 686.139575][T25361] Chain exists of: [ 686.139575][T25361] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 686.139575][T25361] [ 686.153618][T25361] Possible unsafe locking scenario: [ 686.153618][T25361] [ 686.161253][T25361] CPU0 CPU1 [ 686.166673][T25361] ---- ---- [ 686.172097][T25361] rlock(cpu_hotplug_lock); [ 686.176728][T25361] lock(&nsock->tx_lock); [ 686.183697][T25361] lock(cpu_hotplug_lock); [ 686.190749][T25361] rlock(&root->kernfs_iattr_rwsem); [ 686.196148][T25361] [ 686.196148][T25361] *** DEADLOCK *** [ 686.196148][T25361] [ 686.204391][T25361] locks held by syz.2.5446/25361: 5, last CPU#1: [ 686.210813][T25361] #0: ffff88807bd9f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 686.219986][T25361] #1: ffff888036108460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 686.228949][T25361] #2: ffff88807a78f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 686.238769][T25361] #3: ffffffff8ed9c7e0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 686.248581][T25361] #4: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 686.259174][T25361] [ 686.259174][T25361] stack backtrace: [ 686.265104][T25361] CPU: 1 UID: 0 PID: 25361 Comm: syz.2.5446 Not tainted syzkaller #0 PREEMPT(full) [ 686.274508][T25361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.284609][T25361] Call Trace: [ 686.287936][T25361] [ 686.291414][T25361] dump_stack_lvl+0xe8/0x150 [ 686.296061][T25361] print_circular_bug+0x2e2/0x300 [ 686.301145][T25361] check_noncircular+0x12f/0x150 [ 686.306152][T25361] __lock_acquire+0x164c/0x2de0 [ 686.311052][T25361] ? __lock_acquire+0x747/0x2de0 [ 686.316062][T25361] lock_acquire+0x115/0x350 [ 686.320623][T25361] ? kernfs_iop_permission+0x7f/0x430 [ 686.326075][T25361] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 686.331945][T25361] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 686.337798][T25361] down_read+0x4a/0x330 [ 686.341999][T25361] ? kernfs_iop_permission+0x7f/0x430 [ 686.347421][T25361] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 686.353297][T25361] kernfs_iop_permission+0x7f/0x430 [ 686.358547][T25361] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 686.364400][T25361] inode_permission+0x3de/0x5f0 [ 686.369302][T25361] cgroup_attach_permissions+0x28e/0x9f0 [ 686.374980][T25361] __cgroup_procs_write+0x24b/0x320 [ 686.380233][T25361] cgroup_threads_write+0x24/0x50 [ 686.385302][T25361] ? __pfx_cgroup_threads_write+0x10/0x10 [ 686.391070][T25361] cgroup_file_write+0x331/0x8f0 [ 686.396069][T25361] ? __pfx_cgroup_file_write+0x10/0x10 [ 686.401577][T25361] ? __kmalloc_noprof+0x38c/0x720 [ 686.406641][T25361] ? __pfx_cgroup_file_write+0x10/0x10 [ 686.412141][T25361] kernfs_fop_write_iter+0x3a4/0x540 [ 686.417480][T25361] vfs_write+0x612/0xba0 [ 686.421781][T25361] ? __pfx_vfs_write+0x10/0x10 [ 686.426610][T25361] ? __fget_files+0x2a/0x420 [ 686.431247][T25361] ksys_write+0x150/0x270 [ 686.435628][T25361] ? __pfx_ksys_write+0x10/0x10 [ 686.440528][T25361] do_syscall_64+0x166/0x520 [ 686.445157][T25361] ? trace_irq_disable+0x3b/0x140 [ 686.450215][T25361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.456312][T25361] ? clear_bhb_loop+0x70/0xc0 [ 686.461030][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.466983][T25361] RIP: 0033:0x7f9329d9e159 [ 686.471429][T25361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.491074][T25361] RSP: 002b:00007f932abe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.499539][T25361] RAX: ffffffffffffffda RBX: 00007f932a025fa0 RCX: 00007f9329d9e159 [ 686.507562][T25361] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 686.515642][T25361] RBP: 00007f9329e3506b R08: 0000000000000000 R09: 0000000000000000 [ 686.523649][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.531657][T25361] R13: 00007f932a026038 R14: 00007f932a025fa0 R15: 00007ffee848b0c8 [ 686.539691][T25361] [ 686.551279][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.557683][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.186500][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.196190][T17930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.577276][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.449079][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.617876][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.662164][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.692316][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.000609][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.000815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.721676][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.770834][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.931481][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.560479][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.801852][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.843308][T18316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog